last executing test programs: 7m27.958693811s ago: executing program 3 (id=1154): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x10005c9, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 7m27.599282707s ago: executing program 3 (id=1159): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300044d, 0x1) write$cgroup_int(r0, &(0x7f0000000300)=0x7f, 0xfdef) 7m27.365138206s ago: executing program 3 (id=1163): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) 7m26.007735851s ago: executing program 3 (id=1176): unshare(0x4a000000) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x60) 7m24.796941458s ago: executing program 3 (id=1186): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') 7m24.617503068s ago: executing program 3 (id=1188): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xc5661000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) 7m9.308761012s ago: executing program 32 (id=1188): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xc5661000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) 5m55.955016124s ago: executing program 2 (id=1951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1a0, 0x0, 0x100000000}]}) 5m55.535668877s ago: executing program 2 (id=1961): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000002e") 5m55.297142611s ago: executing program 2 (id=1963): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-224)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 5m54.897595198s ago: executing program 2 (id=1970): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 5m54.659648382s ago: executing program 2 (id=1973): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) 5m54.034054796s ago: executing program 2 (id=1978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x3f1, 0x0, 0x800}]}) 5m53.792620575s ago: executing program 33 (id=1978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x3f1, 0x0, 0x800}]}) 5m22.461851232s ago: executing program 1 (id=2252): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x884, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5m22.308985089s ago: executing program 1 (id=2254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4004051}, 0x4000000) 5m21.980657326s ago: executing program 1 (id=2257): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000001001000001"], 0x10}, 0x40) readv(r0, &(0x7f0000004500)=[{&(0x7f0000000180)=""/45, 0x2d}], 0x1) 5m21.030877147s ago: executing program 1 (id=2271): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp6\x00') pread64(r1, &(0x7f0000000000)=""/81, 0x51, 0xfff) 5m20.881959656s ago: executing program 1 (id=2273): unshare(0x22020600) r0 = syz_io_uring_setup(0x5229, &(0x7f0000000400)={0x0, 0x100000, 0x10000, 0x0, 0x40051}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_FSETXATTR={0x29, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000500)='e(', &(0x7f0000004980)='./file0/file0\x00', 0x2}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 5m20.710730122s ago: executing program 1 (id=2275): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='lazy', 0x4) 5m5.087055951s ago: executing program 34 (id=2275): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='lazy', 0x4) 1m44.131661867s ago: executing program 4 (id=4131): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) lseek(r0, 0xae, 0x2) 1m44.062076421s ago: executing program 4 (id=4133): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0', 0x1) 1m43.998720858s ago: executing program 4 (id=4135): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 1m43.95168599s ago: executing program 4 (id=4138): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 1m43.95121169s ago: executing program 4 (id=4141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000004c0)=@vmx={0xc, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {0x3}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"}}) 1m43.809892142s ago: executing program 4 (id=4146): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 1m43.740521057s ago: executing program 35 (id=4146): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 1m41.692227996s ago: executing program 5 (id=4188): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)={0x5e}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m41.596450945s ago: executing program 5 (id=4190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000010900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 1m41.49787881s ago: executing program 5 (id=4191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xc374}]}) 1m41.338649282s ago: executing program 5 (id=4199): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 1m41.023386472s ago: executing program 5 (id=4201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x60, r1, 0x1, 0x70bd27, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @broadcast, @random="2f2cf2cb8880", {0x5, 0x43}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x0, 0x0, {0x1, 0x8, 0x0, 0x3f9, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x7fffffff, 0x9}}, @val={0x72, 0x6}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 1m41.021589018s ago: executing program 5 (id=4202): socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) 1m40.902611459s ago: executing program 36 (id=4202): socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) 964.785619ms ago: executing program 8 (id=6549): r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) setns(0xc9, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 869.997534ms ago: executing program 6 (id=6551): r0 = syz_io_uring_setup(0x3bd7, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000b00)=[@ioring_restriction_sqe_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 778.86385ms ago: executing program 6 (id=6553): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x200002ab, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xb, r1, &(0x7f0000000080)="b970cb2b79989428", 0x8, 0x1000, 0x0, 0xbd4c3b8bc89fc43d, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0x8000000000000005, 0x0, 0x2, r1}]) 776.988711ms ago: executing program 8 (id=6554): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xfffffffa, @loopback, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 666.086184ms ago: executing program 8 (id=6557): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x7, 0x7, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x27, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0ffb, 0x8080000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x5, 0x2, 0x1, 0x2, 0x80, 0x10, 0xff, 0x6}, {0x0, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf9ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) 480.864043ms ago: executing program 6 (id=6561): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) 480.647682ms ago: executing program 0 (id=6562): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000fddbdf250c00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 417.380164ms ago: executing program 8 (id=6563): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) 416.790732ms ago: executing program 0 (id=6564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_delvlan={0x30, 0x70, 0x1, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x7, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x90f7f9f8c4e0478b, 0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 360.959538ms ago: executing program 6 (id=6565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x9, 0x8, 0x40, 0x8, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r0}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4}, 0x38) 360.62659ms ago: executing program 8 (id=6566): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 288.702989ms ago: executing program 7 (id=6567): mkdir(&(0x7f0000000100)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debugfs\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x0) 287.483425ms ago: executing program 0 (id=6568): mkdirat(0xffffffffffffff9c, 0x0, 0x2c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) ftruncate(r0, 0x109ef) 287.335917ms ago: executing program 6 (id=6569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 241.566605ms ago: executing program 7 (id=6570): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 171.906984ms ago: executing program 0 (id=6571): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, 0x0) 171.641825ms ago: executing program 7 (id=6572): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="3c00000043001f001307f4f9002304000a04d65f0800080000000002170003800500000099db3500b0406700000000548593223487ee891c0ebf0798", 0x3c) 152.277763ms ago: executing program 7 (id=6573): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xfff8, 0x8, 0x0, 0x1, r1}, &(0x7f0000000280)=0x10) 149.628875ms ago: executing program 0 (id=6574): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x8, 0x101000) fanotify_mark(r2, 0x90, 0x8100000, r1, 0x0) 67.028219ms ago: executing program 7 (id=6575): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x0, 0x0, {}, {0x0}, 0x0, 0x3}) setresuid(r1, 0x0, r1) setresuid(0xffffffffffffffff, 0x0, 0x0) 66.693632ms ago: executing program 8 (id=6576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200200, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) 62.7048ms ago: executing program 6 (id=6577): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0xd4}) 192.527µs ago: executing program 0 (id=6578): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 7 (id=6579): mkdir(&(0x7f0000000180)='./file0\x00', 0xb2) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) umount2(&(0x7f0000000240)='./file0\x00', 0xc) kernel console output (not intermixed with test programs): op7: unable to read RDB block 0 [ 206.329580][ T9051] loop7: unable to read partition table [ 206.332566][ T9051] loop7: partition table beyond EOD, truncated [ 206.938524][ T5745] Bluetooth: hci4: command tx timeout [ 207.088493][ T9067] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 207.766047][ T9085] loop7: detected capacity change from 0 to 7 [ 207.820544][ T9085] ldm_validate_partition_table(): Disk read failed. [ 207.824935][ T9085] Dev loop7: unable to read RDB block 0 [ 207.832659][ T9085] loop7: unable to read partition table [ 207.837794][ T9085] loop7: partition table beyond EOD, truncated [ 207.842630][ T9085] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 207.956226][ T9087] ldm_validate_partition_table(): Disk read failed. [ 207.978886][ T9087] Dev loop7: unable to read RDB block 0 [ 207.982567][ T9087] loop7: unable to read partition table [ 207.996088][ T9087] loop7: partition table beyond EOD, truncated [ 209.223856][ T9115] CUSE: info not properly terminated [ 209.549688][ T9121] netlink: 'syz.0.1310': attribute type 1 has an invalid length. [ 209.557845][ T9121] block nbd1: shutting down sockets [ 210.365573][ T9151] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 210.400490][ T5745] Bluetooth: hci4: ACL packet too small [ 211.684595][ T9181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1336'. [ 211.864126][ T9183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.220192][ T9183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.353351][ T9197] block2mtd: illegal erase size [ 212.454490][ T9183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.818792][ T9183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.242397][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.252946][ T9210] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.634643][ T9210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.644749][ T9210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.128138][ T5814] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.178566][ T9213] geneve2: entered promiscuous mode [ 214.202772][ T7068] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.337500][ T5846] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.340745][ T5846] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.347874][ T5846] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.357516][ T5846] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.901656][ T9254] block2mtd: error: cannot open device #! [ 216.598828][ T9271] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1375'. [ 216.652809][ T9271] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1375'. [ 216.792521][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 218.128613][ T9304] sctp: [Deprecated]: syz.2.1389 (pid 9304) Use of int in max_burst socket option deprecated. [ 218.128613][ T9304] Use struct sctp_assoc_value instead [ 219.847357][ T9352] Format for deleting device is "id" (uint). [ 221.566524][ T9413] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 221.577002][ T9412] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 221.577066][ T9412] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 221.842032][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1439'. [ 222.352476][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'. [ 222.370545][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1449'. [ 222.373899][ T9442] netlink: 'syz.4.1449': attribute type 18 has an invalid length. [ 222.391439][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'. [ 222.409332][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'. [ 222.412871][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1449'. [ 222.416168][ T9443] netlink: 'syz.4.1449': attribute type 18 has an invalid length. [ 222.421215][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'. [ 222.430713][ T5814] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.450387][ T5814] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.453546][ T5814] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.487458][ T5814] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.275718][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1457'. [ 223.747957][ T9480] sctp: [Deprecated]: syz.4.1467 (pid 9480) Use of int in max_burst socket option deprecated. [ 223.747957][ T9480] Use struct sctp_assoc_value instead [ 223.878547][ T9484] Bluetooth: hci1: Frame reassembly failed (-84) [ 225.642003][ T9524] erspan0: entered promiscuous mode [ 225.836563][ T9528] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 225.855638][ T9528] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 225.864851][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1487'. [ 225.971775][ T5745] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 225.978227][ T5749] Bluetooth: hci1: command 0x1003 tx timeout [ 226.633279][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'. [ 226.640732][ T9547] netlink: 'syz.2.1497': attribute type 18 has an invalid length. [ 226.660804][ T5814] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.675740][ T5814] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.679171][ T9547] netlink: 'syz.2.1497': attribute type 18 has an invalid length. [ 226.687990][ T5814] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.688021][ T5814] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.950623][ T5845] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 228.129499][ T5845] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.138698][ T5845] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 228.148666][ T5845] usb 6-1: config 0 interface 0 has no altsetting 0 [ 228.156824][ T5845] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 228.162206][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 228.168204][ T5845] usb 6-1: Product: syz [ 228.170338][ T5845] usb 6-1: Manufacturer: syz [ 228.173034][ T5845] usb 6-1: SerialNumber: syz [ 229.200211][ T9593] base or size exceeds the MTRR width [ 230.311183][ T5845] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 230.517379][ T5845] usb 9-1: Using ep0 maxpacket: 8 [ 230.522426][ T5845] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 230.526725][ T5845] usb 9-1: config 0 has no interface number 0 [ 230.531362][ T5845] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.544564][ T5845] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.554146][ T5845] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 230.570718][ T5845] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 230.582877][ T5845] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.633498][ T5845] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 230.647486][ T5845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.668135][ T5845] usb 9-1: Product: syz [ 230.669924][ T5845] usb 9-1: Manufacturer: syz [ 230.671702][ T5845] usb 9-1: SerialNumber: syz [ 230.712964][ T5522] usb 6-1: USB disconnect, device number 4 [ 230.729389][ T9513] Set syz1 is full, maxelem 65536 reached [ 231.870698][ T9632] e1000e 0000:00:02.0 eth1: removed PHC [ 231.950493][ T9639] __nla_validate_parse: 5 callbacks suppressed [ 231.950513][ T9639] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1537'. [ 232.200362][ T9632] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 233.138213][ T843] usb 9-1: USB disconnect, device number 2 [ 234.453320][ T9718] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 234.473538][ T9716] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 234.570617][ C2] hpet: Lost 1 RTC interrupts [ 234.674405][ C2] hpet: Lost 2 RTC interrupts [ 234.786341][ C2] hpet: Lost 1 RTC interrupts [ 234.979717][ T1483] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 234.984380][ T1483] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 234.997868][ T1483] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 235.008340][ T1483] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 235.030371][ T1483] rtc rtc0: __rtc_set_alarm: err=-22 [ 235.835178][ T9759] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 236.255711][ T9765] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 236.715437][ T5745] Bluetooth: Wrong link type (-71) [ 238.005699][ T9804] bond0: entered promiscuous mode [ 238.008676][ T9804] bond_slave_0: entered promiscuous mode [ 238.015630][ T9804] bond_slave_1: entered promiscuous mode [ 238.028015][ T9804] ipvlan1: entered promiscuous mode [ 238.032264][ T9804] ipvlan1: left promiscuous mode [ 238.070524][ T9804] bond0: left promiscuous mode [ 238.077877][ T9804] bond_slave_0: left promiscuous mode [ 238.086233][ T9804] bond_slave_1: left promiscuous mode [ 238.127582][ T5745] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 238.394975][ T9820] netlink: 'syz.1.1599': attribute type 1 has an invalid length. [ 238.408329][ T9820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1599'. [ 240.414976][ T9887] jffs2: notice: (9887) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.879490][ T29] kernel write not supported for file [eventfd] (pid: 29 comm: kworker/1:0) [ 242.787862][ T9966] Line length is too long: Should be less than 4094 [ 243.012802][ T9968] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x42 [ 245.077161][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 245.083917][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 245.508324][T10028] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.648265][T10040] syz.1.1694: vmalloc error: size 15032385536, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 245.664958][T10040] CPU: 1 UID: 0 PID: 10040 Comm: syz.1.1694 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.664984][T10040] Tainted: [L]=SOFTLOCKUP [ 245.664990][T10040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.665001][T10040] Call Trace: [ 245.665007][T10040] [ 245.665013][T10040] dump_stack_lvl+0x100/0x190 [ 245.665042][T10040] warn_alloc.cold+0x94/0xa8 [ 245.665060][T10040] ? __pfx_warn_alloc+0x10/0x10 [ 245.665088][T10040] ? check_noncircular+0x97/0x160 [ 245.665116][T10040] __vmalloc_node_range_noprof+0x136c/0x1630 [ 245.665140][T10040] ? check_prev_add+0xfe/0xe60 [ 245.665167][T10040] ? __lock_acquire+0xd5b/0x1a40 [ 245.665190][T10040] ? disksize_store+0x11a/0x4d0 [ 245.665219][T10040] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 245.665248][T10040] ? __pfx___might_resched+0x10/0x10 [ 245.665272][T10040] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 245.665301][T10040] ? disksize_store+0x11a/0x4d0 [ 245.665319][T10040] __vmalloc_node_noprof+0xad/0xf0 [ 245.665346][T10040] ? disksize_store+0x11a/0x4d0 [ 245.665368][T10040] disksize_store+0x11a/0x4d0 [ 245.665390][T10040] ? sysfs_file_kobj+0xe4/0x290 [ 245.665416][T10040] ? __pfx_disksize_store+0x10/0x10 [ 245.665437][T10040] dev_attr_store+0x58/0x80 [ 245.665467][T10040] ? __pfx_dev_attr_store+0x10/0x10 [ 245.665493][T10040] sysfs_kf_write+0xf2/0x150 [ 245.665520][T10040] kernfs_fop_write_iter+0x3e0/0x5f0 [ 245.665542][T10040] ? __pfx_sysfs_kf_write+0x10/0x10 [ 245.665571][T10040] vfs_write+0x6ac/0x1050 [ 245.665589][T10040] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 245.665611][T10040] ? __pfx_vfs_write+0x10/0x10 [ 245.665627][T10040] ? find_held_lock+0x2b/0x80 [ 245.665668][T10040] ksys_write+0x12a/0x250 [ 245.665685][T10040] ? __pfx_ksys_write+0x10/0x10 [ 245.665735][T10040] __do_fast_syscall_32+0xe7/0x970 [ 245.665781][T10040] do_fast_syscall_32+0x32/0x70 [ 245.665806][T10040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.665827][T10040] RIP: 0023:0xf7f33fec [ 245.665849][T10040] Code: Unable to access opcode bytes at 0xf7f33fc2. [ 245.665858][T10040] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 245.665876][T10040] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 245.665888][T10040] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.665899][T10040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.665909][T10040] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 245.665918][T10040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.665944][T10040] [ 245.857008][T10040] Mem-Info: [ 245.860089][T10040] active_anon:5324 inactive_anon:197 isolated_anon:0 [ 245.860089][T10040] active_file:401 inactive_file:52270 isolated_file:0 [ 245.860089][T10040] unevictable:5010 dirty:245 writeback:0 [ 245.860089][T10040] slab_reclaimable:7987 slab_unreclaimable:58184 [ 245.860089][T10040] mapped:27681 shmem:5378 pagetables:1198 [ 245.860089][T10040] sec_pagetables:294 bounce:0 [ 245.860089][T10040] kernel_misc_reclaimable:0 [ 245.860089][T10040] free:37948 free_pcp:6815 free_cma:0 [ 245.891842][T10040] Node 0 active_anon:240kB inactive_anon:76kB active_file:24kB inactive_file:2332kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8544kB pagetables:1552kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 245.914275][T10040] Node 1 active_anon:21156kB inactive_anon:712kB active_file:1580kB inactive_file:206748kB unevictable:17940kB isolated(anon):100kB isolated(file):0kB mapped:110696kB dirty:976kB writeback:0kB shmem:19512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5332kB pagetables:3240kB sec_pagetables:52kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 245.942026][T10040] Node 0 DMA free:3036kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 245.961181][T10040] lowmem_reserve[]: 0 280 280 280 280 [ 245.966110][T10040] Node 0 DMA32 free:17932kB boost:2048kB min:14824kB low:18016kB high:21208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:240kB inactive_anon:72kB active_file:24kB inactive_file:2332kB unevictable:2000kB writepending:4kB zspages:0kB present:1032196kB managed:287072kB mlocked:0kB bounce:0kB free_pcp:8848kB local_pcp:388kB free_cma:0kB [ 245.986251][T10040] lowmem_reserve[]: 0 0 0 0 0 [ 245.986966][T10028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.989129][T10040] Node 1 DMA32 free:130824kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21156kB inactive_anon:712kB active_file:1580kB inactive_file:206748kB unevictable:7740kB writepending:976kB zspages:1812kB present:1048432kB managed:948212kB mlocked:15656kB bounce:0kB free_pcp:18040kB local_pcp:1752kB free_cma:0kB [ 246.011157][T10040] lowmem_reserve[]: 0 0 0 0 0 [ 246.014500][T10040] Node 0 DMA: 135*4kB (U) 30*8kB (U) 13*16kB (U) 18*32kB (U) 5*64kB (U) 3*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 3036kB [ 246.024724][T10040] Node 0 DMA32: 225*4kB (UE) 115*8kB (UM) 67*16kB (UME) 208*32kB (UME) 65*64kB (UME) 17*128kB (UME) 6*256kB (ME) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17932kB [ 246.050950][T10028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.058344][T10040] Node 1 DMA32: 409*4kB (UE) 177*8kB (UE) 41*16kB (UME) 154*32kB (UE) 182*64kB (UME) 171*128kB (UME) 80*256kB (UME) 31*512kB (UM) 35*1024kB (UME) 6*2048kB (UM) 1*4096kB (M) = 130748kB [ 246.058576][T10040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.058595][T10040] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 246.058612][T10040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.058629][T10040] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 246.058644][T10040] 58625 total pagecache pages [ 246.058653][T10040] 580 pages in swap cache [ 246.058661][T10040] Free swap = 119192kB [ 246.058670][T10040] Total swap = 124996kB [ 246.058679][T10040] 524155 pages RAM [ 246.058687][T10040] 0 pages HighMem/MovableOnly [ 246.058695][T10040] 211494 pages reserved [ 246.058703][T10040] 0 pages cma reserved [ 246.260107][T10043] hugetlbfs: Bad value '' for mount option 'nr_inodes' [ 246.260107][T10043] [ 246.971051][T10031] geneve2: entered promiscuous mode [ 247.016488][T10055] zero sized request [ 247.047549][ T5814] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.112625][ T5846] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.157360][ T5846] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.235441][ T5846] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.414956][T10060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1704'. [ 247.906900][T10078] overlayfs: upper fs does not support tmpfile. [ 248.177010][T10089] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 248.223611][ T1156] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 248.330265][T10092] i2c i2c-0: Failed to register i2c client wcd9390-usbss at 0x42 (-16) [ 248.719674][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 248.747546][T10103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1723'. [ 249.081943][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'. [ 249.091336][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'. [ 249.150360][T10113] printk: legacy console [ttyS0] disabled [ 553.952593][T17774] printk: legacy console [ttyS0] enabled [ 553.977149][T17776] input: syz0 as /devices/virtual/input/input28 [ 554.139330][ T29] kernel write not supported for file /input/event2 (pid: 29 comm: kworker/1:0) [ 554.703953][T13217] Bluetooth: hci0: Zero size dump init pkt [ 554.761072][T17823] loop4: detected capacity change from 0 to 524287936 [ 554.824152][T17828] jffs2: notice: (17828) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 555.489716][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.670121][T17873] jffs2: notice: (17873) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 555.783965][T17881] input: syz0 as /devices/virtual/input/input29 [ 556.030832][T17903] jffs2: notice: (17903) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 556.127658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.378801][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.644436][T17940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.648977][T17940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.651777][T17940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.659245][T17939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.678821][T17939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.418877][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.451605][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4985'. [ 557.788881][T18017] kAFS: bad VL server IP address [ 557.796547][ T42] kauditd_printk_skb: 77 callbacks suppressed [ 557.796564][ T42] audit: type=1800 audit(1786148501.936:4663): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 557.843707][ T42] audit: type=1800 audit(1786148501.986:4664): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 557.870698][ T42] audit: type=1800 audit(1786148502.016:4665): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 557.890036][ T42] audit: type=1800 audit(1786148502.036:4666): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262874 res=0 errno=0 [ 557.938920][ T42] audit: type=1800 audit(1786148502.076:4667): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 557.958428][ T42] audit: type=1800 audit(1786148502.096:4668): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25701 res=0 errno=0 [ 558.014735][ T42] audit: type=1800 audit(1786148502.156:4669): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 558.155338][T18038] block nbd1: server does not support multiple connections per device. [ 558.159671][T18038] block nbd1: shutting down sockets [ 558.186511][ T42] audit: type=1800 audit(1786148502.326:4670): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="vendor" dev="sysfs" ino=25625 res=0 errno=0 [ 558.207779][ T42] audit: type=1800 audit(1786148502.326:4671): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=25622 res=0 errno=0 [ 558.220057][ T42] audit: type=1800 audit(1786148502.326:4672): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="scsi_level" dev="sysfs" ino=25623 res=0 errno=0 [ 558.449719][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.527666][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.888274][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5029'. [ 560.253892][T15941] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 560.286929][T18180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5068'. [ 561.119008][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5094'. [ 561.134819][T18238] veth0_macvtap: left promiscuous mode [ 561.222217][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5097'. [ 561.225259][T18244] netlink: 'syz.8.5097': attribute type 30 has an invalid length. [ 561.240088][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5097'. [ 561.242884][T18244] netlink: 'syz.8.5097': attribute type 30 has an invalid length. [ 561.253054][ T8096] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.257291][ T8096] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.265036][ T8096] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.268241][ T8096] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.568193][ T29] net_ratelimit: 4 callbacks suppressed [ 561.568214][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.574190][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.595968][T18265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5107'. [ 561.609827][T18265] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.695366][T18265] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.762270][T18265] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.865324][T18265] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.012238][ T8096] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.020506][T18284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.026932][ T8096] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.051758][ T8096] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.057502][ T8096] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.429314][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5129'. [ 562.440072][T18311] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.520035][T18311] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.531025][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.610584][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.622432][T18311] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.688024][T18311] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.804518][ T8096] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.837673][T10935] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.842955][T10935] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.846140][T10935] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.943855][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5152'. [ 562.977453][T18343] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.102338][T18343] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.163780][T18343] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.242720][T18343] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.435721][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 563.435738][ T42] audit: type=1800 audit(1786148507.576:4711): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 563.505142][ T42] audit: type=1800 audit(1786148507.646:4712): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 563.576555][ T42] audit: type=1800 audit(1786148507.716:4713): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 563.647561][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.910921][ T42] audit: type=1800 audit(1786148508.056:4714): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 564.047687][ T42] audit: type=1800 audit(1786148508.196:4715): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 564.069140][T18409] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5174'. [ 564.111920][ T42] audit: type=1800 audit(1786148508.256:4716): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 564.122781][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5177'. [ 564.156507][ T42] audit: type=1800 audit(1786148508.296:4717): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 564.184607][T18421] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 564.189650][T18421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.214206][ T42] audit: type=1800 audit(1786148508.356:4718): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 564.306111][ T42] audit: type=1800 audit(1786148508.446:4719): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 564.347774][ T42] audit: type=1800 audit(1786148508.496:4720): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 564.355179][T18435] netlink: 'syz.0.5185': attribute type 4 has an invalid length. [ 564.609786][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.697621][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.359587][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5211'. [ 565.729329][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.747499][ T8096] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.767494][ T8096] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.777286][ T8096] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.779979][ T8096] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.885964][T18504] netlink: 'syz.8.5217': attribute type 4 has an invalid length. [ 566.767576][ T5823] net_ratelimit: 1 callbacks suppressed [ 566.767597][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.976617][T18563] netlink: 'syz.8.5247': attribute type 2 has an invalid length. [ 566.981329][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5247'. [ 567.019204][T18567] openvswitch: netlink: IP tunnel dst address not specified [ 567.021742][T18567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.056284][T18569] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5250'. [ 567.075626][T18571] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5251'. [ 567.708378][T18635] sch_fq: defrate 0 ignored. [ 567.809387][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.400446][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5312'. [ 568.406876][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5312'. [ 568.462858][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 568.462876][ T42] audit: type=1800 audit(1786148512.606:4774): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 568.586816][ T42] audit: type=1800 audit(1786148512.726:4775): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 568.636667][ T42] audit: type=1800 audit(1786148512.776:4776): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 568.743294][ T42] audit: type=1800 audit(1786148512.886:4777): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 568.768994][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.795918][ T42] audit: type=1800 audit(1786148512.936:4778): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 568.832863][ T42] audit: type=1800 audit(1786148512.976:4779): pid=18740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5331" name="dbroot" dev="configfs" ino=79802 res=0 errno=0 [ 568.848504][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.877107][ T42] audit: type=1800 audit(1786148513.016:4780): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 568.932875][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.991758][ T42] audit: type=1800 audit(1786148513.136:4781): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 569.052450][ T42] audit: type=1800 audit(1786148513.186:4782): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 569.091026][ T42] audit: type=1800 audit(1786148513.236:4783): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 569.274697][T18773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5346'. [ 569.571527][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.898868][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.998925][T18818] pimreg: tun_chr_ioctl cmd 1074025678 [ 570.000904][T18818] pimreg: group set to 768 [ 570.318547][T18842] syz.7.5376 uses obsolete (PF_INET,SOCK_PACKET) [ 570.645032][T18849] binder: 18848:18849 ioctl c0306201 80000080 returned -14 [ 570.871234][T18863] serio: Serial port ttynull [ 570.939832][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.131395][T18888] block2mtd: illegal erase size [ 571.242810][T18891] serio: Serial port ttynull [ 571.809489][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.979741][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.927918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.931675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.937794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.941176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.944792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.948279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.951194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.954507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.620270][T19015] GUP no longer grows the stack in syz.8.5458 (19015): 80009000-8000a000 (80005000) [ 573.625708][T19015] CPU: 2 UID: 0 PID: 19015 Comm: syz.8.5458 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 573.625729][T19015] Tainted: [L]=SOFTLOCKUP [ 573.625734][T19015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 573.625740][T19015] Call Trace: [ 573.625746][T19015] [ 573.625751][T19015] dump_stack_lvl+0x100/0x190 [ 573.625772][T19015] gup_vma_lookup.cold+0x83/0x96 [ 573.625791][T19015] __get_user_pages+0x241/0x32a0 [ 573.625816][T19015] ? down_read_killable+0x35e/0x520 [ 573.625841][T19015] ? __pfx___get_user_pages+0x10/0x10 [ 573.625862][T19015] __gup_longterm_locked+0x87d/0x16f0 [ 573.625883][T19015] ? __pfx___gup_longterm_locked+0x10/0x10 [ 573.625901][T19015] ? lock_acquire+0x1b9/0x370 [ 573.625917][T19015] gup_fast_fallback+0x16dc/0x2790 [ 573.625942][T19015] ? __pfx_gup_fast_fallback+0x10/0x10 [ 573.625958][T19015] ? find_held_lock+0x2b/0x80 [ 573.625973][T19015] ? __lock_acquire+0x49f/0x1a40 [ 573.625991][T19015] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 573.626006][T19015] get_user_pages_fast+0xa7/0xf0 [ 573.626022][T19015] ? __pfx_get_user_pages_fast+0x10/0x10 [ 573.626039][T19015] ? iov_iter_advance+0xac/0x6d0 [ 573.626059][T19015] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 573.626079][T19015] ? pipe_lock+0x69/0x80 [ 573.626091][T19015] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 573.626109][T19015] ? __pfx___mutex_lock+0x10/0x10 [ 573.626126][T19015] ? iovec_from_user+0xda/0x140 [ 573.626147][T19015] iov_iter_get_pages2+0xa3/0x100 [ 573.626165][T19015] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 573.626182][T19015] ? wait_for_space+0x2ca/0x3b0 [ 573.626197][T19015] __do_sys_vmsplice+0x7dd/0x13c0 [ 573.626217][T19015] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 573.626236][T19015] ? __pfx_futex_wait+0x10/0x10 [ 573.626274][T19015] ? __do_fast_syscall_32+0xe7/0x970 [ 573.626291][T19015] __do_fast_syscall_32+0xe7/0x970 [ 573.626309][T19015] do_fast_syscall_32+0x32/0x70 [ 573.626325][T19015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 573.626340][T19015] RIP: 0023:0xf7f27fec [ 573.626362][T19015] Code: Unable to access opcode bytes at 0xf7f27fc2. [ 573.626367][T19015] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000013c [ 573.626380][T19015] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 573.626388][T19015] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 573.626395][T19015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.626403][T19015] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 573.626411][T19015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.626426][T19015] [ 573.762558][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 573.762573][ T42] audit: type=1800 audit(1786148517.906:4822): pid=19019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5459" name="file0" dev="tmpfs" ino=1752 res=0 errno=0 [ 573.766362][T19019] bpf: Bad value for 'uid' [ 573.838073][ T42] audit: type=1800 audit(1786148517.986:4823): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 573.906045][T19033] macvlan0: entered promiscuous mode [ 573.908494][T19033] netlink: 'syz.0.5467': attribute type 1 has an invalid length. [ 573.909172][ T42] audit: type=1800 audit(1786148518.056:4824): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 573.911856][T19033] netlink: 'syz.0.5467': attribute type 2 has an invalid length. [ 574.060222][T16099] kernel read not supported for file /dsp (pid: 16099 comm: kworker/2:4) [ 574.075869][ T42] audit: type=1800 audit(1786148518.216:4825): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 574.133668][ T42] audit: type=1800 audit(1786148518.276:4826): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 574.217123][ T42] audit: type=1800 audit(1786148518.356:4827): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 574.299568][ T42] audit: type=1800 audit(1786148518.446:4828): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 574.496599][ T42] audit: type=1800 audit(1786148518.636:4829): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 574.557075][ T42] audit: type=1800 audit(1786148518.696:4830): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 574.821257][ T29] kernel read not supported for file /dsp (pid: 29 comm: kworker/1:0) [ 574.919127][T19093] gfs2: path_lookup on  returned error -2 [ 575.011181][T19101] gfs2: path_lookup on  returned error -2 [ 575.030077][T19104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5497'. [ 575.197800][T19124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5509'. [ 575.216346][ T42] audit: type=1800 audit(1786148519.356:4831): pid=19126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5510" name="control" dev="sysfs" ino=2640 res=0 errno=0 [ 575.649861][T19164] kAFS: bad VL server IP address [ 575.687584][ T843] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 575.837318][ T843] usb 13-1: Using ep0 maxpacket: 32 [ 575.840891][ T843] usb 13-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 575.846903][ T843] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.177515][ T5823] net_ratelimit: 1308 callbacks suppressed [ 577.177532][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.887865][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.217549][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.442339][ T24] usb 13-1: USB disconnect, device number 2 [ 578.681840][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5550'. [ 578.727288][ T5831] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 578.748599][T19222] udc usbip-vudc.0: soft-connect without a gadget driver [ 578.805855][T19229] ovs-system: entered promiscuous mode [ 578.878624][ T5831] usb 5-1: not running at top speed; connect to a high speed hub [ 578.882965][ T5831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.889690][ T5831] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 578.893415][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.896453][ T5831] usb 5-1: Product: syz [ 578.898217][ T5831] usb 5-1: Manufacturer: syz [ 578.899630][ T5831] usb 5-1: SerialNumber: syz [ 578.903732][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 578.903743][ T42] audit: type=1800 audit(1786148523.046:4858): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=264763 res=0 errno=0 [ 578.914318][ T42] audit: type=1800 audit(1786148523.046:4859): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=264795 res=0 errno=0 [ 578.924339][ T42] audit: type=1800 audit(1786148523.046:4860): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=264770 res=0 errno=0 [ 578.933485][ T42] audit: type=1800 audit(1786148523.046:4861): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=264771 res=0 errno=0 [ 578.940806][ T42] audit: type=1800 audit(1786148523.046:4862): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=264792 res=0 errno=0 [ 578.947405][ T42] audit: type=1800 audit(1786148523.056:4863): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=264793 res=0 errno=0 [ 578.954454][ T42] audit: type=1800 audit(1786148523.056:4864): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=264772 res=0 errno=0 [ 578.971165][ T42] audit: type=1800 audit(1786148523.056:4865): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=264794 res=0 errno=0 [ 578.974067][T19241] uhci_hcd 0000:00:1d.0: remove, state 4 [ 578.981387][ T42] audit: type=1800 audit(1786148523.096:4866): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 578.983958][T19241] usb usb1: USB disconnect, device number 1 [ 578.987564][ T42] audit: type=1800 audit(1786148523.116:4867): pid=19241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5560" name="remove" dev="sysfs" ino=2860 res=0 errno=0 [ 579.056278][T19241] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 579.088870][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5564'. [ 579.116328][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5565'. [ 579.141880][T19251] netlink: 'syz.8.5566': attribute type 3 has an invalid length. [ 579.145142][T19251] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5566'. [ 579.155409][T19253] syz_tun: entered allmulticast mode [ 579.159487][T19252] syz_tun: left allmulticast mode [ 579.168344][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.258415][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.381642][T19271] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 579.448171][T19273] size and base must be multiples of 4 kiB [ 579.450659][T19273] CPU: 3 UID: 0 PID: 19273 Comm: syz.6.5577 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 579.450689][T19273] Tainted: [L]=SOFTLOCKUP [ 579.450696][T19273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 579.450707][T19273] Call Trace: [ 579.450714][T19273] [ 579.450722][T19273] dump_stack_lvl+0x100/0x190 [ 579.450757][T19273] mtrr_del.cold+0x72/0x85 [ 579.450781][T19273] mtrr_ioctl+0xbc8/0xcf0 [ 579.450808][T19273] ? __pfx_mtrr_ioctl+0x10/0x10 [ 579.450836][T19273] ? find_held_lock+0x2b/0x80 [ 579.450867][T19273] ? __fget_files+0x21f/0x3d0 [ 579.450887][T19273] ? __pfx_mtrr_ioctl+0x10/0x10 [ 579.450908][T19273] proc_reg_compat_ioctl+0x229/0x320 [ 579.450933][T19273] ? __pfx_proc_reg_compat_ioctl+0x10/0x10 [ 579.450955][T19273] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 579.450986][T19273] __do_fast_syscall_32+0xe7/0x970 [ 579.451024][T19273] do_fast_syscall_32+0x32/0x70 [ 579.451053][T19273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 579.451076][T19273] RIP: 0023:0xf702efec [ 579.451098][T19273] Code: Unable to access opcode bytes at 0xf702efc2. [ 579.451107][T19273] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 579.451126][T19273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040104d04 [ 579.451138][T19273] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.451149][T19273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.451159][T19273] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 579.451171][T19273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.451197][T19273] [ 579.591480][T19283] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5581'. [ 579.789364][T19295] zswap: compressor z not available [ 580.178642][T19315] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 580.297433][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.368180][ T5831] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 580.390550][ T5831] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 580.425594][T19330] size and base must be multiples of 4 kiB [ 580.428868][T19330] CPU: 0 UID: 0 PID: 19330 Comm: syz.7.5601 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 580.428887][T19330] Tainted: [L]=SOFTLOCKUP [ 580.428892][T19330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 580.428899][T19330] Call Trace: [ 580.428904][T19330] [ 580.428909][T19330] dump_stack_lvl+0x100/0x190 [ 580.428927][T19330] mtrr_del.cold+0x72/0x85 [ 580.428940][T19330] mtrr_ioctl+0xbc8/0xcf0 [ 580.428956][T19330] ? __pfx_mtrr_ioctl+0x10/0x10 [ 580.428973][T19330] ? find_held_lock+0x2b/0x80 [ 580.429006][T19330] ? __fget_files+0x21f/0x3d0 [ 580.429019][T19330] ? __pfx_mtrr_ioctl+0x10/0x10 [ 580.429031][T19330] proc_reg_compat_ioctl+0x229/0x320 [ 580.429044][T19330] ? __pfx_proc_reg_compat_ioctl+0x10/0x10 [ 580.429056][T19330] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 580.429078][T19330] __do_fast_syscall_32+0xe7/0x970 [ 580.429101][T19330] do_fast_syscall_32+0x32/0x70 [ 580.429120][T19330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 580.429134][T19330] RIP: 0023:0xf7fc7fec [ 580.429149][T19330] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 580.429154][T19330] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 580.429165][T19330] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040104d04 [ 580.429174][T19330] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.429183][T19330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.429191][T19330] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 580.429199][T19330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.429227][T19330] [ 580.593402][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5607'. [ 580.616902][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5608'. [ 580.629242][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5608'. [ 580.927366][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.978347][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5621'. [ 580.981621][T19373] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5621'. [ 581.330869][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.478019][ T5831] usb 5-1: USB disconnect, device number 7 [ 582.167327][ T5815] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 582.319676][ T5815] usb 13-1: not running at top speed; connect to a high speed hub [ 582.324592][ T5815] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.332111][ T5815] usb 13-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 582.336044][ T5815] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.339865][ T5815] usb 13-1: Product: syz [ 582.341766][ T5815] usb 13-1: Manufacturer: syz [ 582.343827][ T5815] usb 13-1: SerialNumber: syz [ 582.377913][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.548033][ T5815] kernel read not supported for file /dsp (pid: 5815 comm: kworker/3:2) [ 582.634845][T19425] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 582.656429][ T122] Bluetooth: hci4: Frame reassembly failed (-84) [ 583.409045][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.520795][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5650'. [ 583.968223][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.122850][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 584.122867][ T42] audit: type=1800 audit(1786148528.266:4914): pid=19456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5656" name="quirks" dev="sysfs" ino=62695 res=0 errno=0 [ 584.440981][ T42] audit: type=1800 audit(1786148528.586:4915): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=265051 res=0 errno=0 [ 584.447608][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.532896][ T42] audit: type=1800 audit(1786148528.676:4916): pid=19481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5669" name="reset" dev="sysfs" ino=22172 res=0 errno=0 [ 584.688082][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 584.693651][T13217] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 584.733580][T19495] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5675'. [ 584.742734][ T42] audit: type=1800 audit(1786148528.886:4917): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 584.760027][T19497] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5676'. [ 584.921713][ T29] usb 13-1: USB disconnect, device number 3 [ 584.927500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.005689][ T42] audit: type=1800 audit(1786148529.146:4918): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 585.115439][ T42] audit: type=1800 audit(1786148529.256:4919): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 585.189581][ T42] audit: type=1800 audit(1786148529.336:4920): pid=19523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5688" name="enabled" dev="sysfs" ino=66874 res=0 errno=0 [ 585.294080][ T42] audit: type=1800 audit(1786148529.436:4921): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 585.345041][ T42] audit: type=1800 audit(1786148529.466:4922): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 585.411896][ T42] audit: type=1800 audit(1786148529.556:4923): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 585.446306][T19543] overlayfs: missing 'workdir' [ 585.497880][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.501040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.618261][T19555] vhci_hcd vhci_hcd.0: remove, state 4 [ 585.623517][T19555] usb usb38: USB disconnect, device number 1 [ 585.704313][T10935] vhci_hcd vhci_hcd.0: stop threads [ 585.706595][T10935] vhci_hcd vhci_hcd.0: release socket [ 585.709349][T10935] vhci_hcd vhci_hcd.0: disconnect device [ 585.714108][T10935] vhci_hcd vhci_hcd.0: stop threads [ 585.716375][T10935] vhci_hcd vhci_hcd.0: release socket [ 585.720568][T10935] vhci_hcd vhci_hcd.0: disconnect device [ 585.724977][T10935] vhci_hcd vhci_hcd.0: stop threads [ 585.727085][T10935] vhci_hcd vhci_hcd.0: release socket [ 585.730887][T10935] vhci_hcd vhci_hcd.0: disconnect device [ 585.734472][T10935] vhci_hcd vhci_hcd.0: stop threads [ 585.736996][T10935] vhci_hcd vhci_hcd.0: release socket [ 585.739859][T10935] vhci_hcd vhci_hcd.0: disconnect device [ 585.742337][T10935] vhci_hcd vhci_hcd.0: stop threads [ 585.744367][T10935] vhci_hcd vhci_hcd.0: release socket [ 585.746326][T10935] vhci_hcd vhci_hcd.0: disconnect device [ 585.748850][T10935] vhci_hcd vhci_hcd.0: stop threads [ 585.750707][T10935] vhci_hcd vhci_hcd.0: release socket [ 585.752738][T10935] vhci_hcd vhci_hcd.0: disconnect device [ 585.757079][T10935] vhci_hcd vhci_hcd.0: stop threads [ 585.760406][T10935] vhci_hcd vhci_hcd.0: release socket [ 585.768781][T10935] vhci_hcd vhci_hcd.0: disconnect device [ 585.773318][T10935] vhci_hcd vhci_hcd.0: stop threads [ 585.775910][T10935] vhci_hcd vhci_hcd.0: release socket [ 585.777921][T10935] vhci_hcd vhci_hcd.0: disconnect device [ 585.779785][T19555] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 585.790923][T19561] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 585.812980][T19555] vhci_hcd vhci_hcd.0: remove, state 4 [ 585.814730][T19555] usb usb37: USB disconnect, device number 1 [ 585.861264][ T12] vhci_hcd vhci_hcd.0: stop threads [ 585.863549][ T12] vhci_hcd vhci_hcd.0: release socket [ 585.865685][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 585.871498][ T12] vhci_hcd vhci_hcd.0: stop threads [ 585.873636][ T12] vhci_hcd vhci_hcd.0: release socket [ 585.875761][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 585.882235][ T12] vhci_hcd vhci_hcd.0: stop threads [ 585.884158][ T12] vhci_hcd vhci_hcd.0: release socket [ 585.887942][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 585.890412][ T12] vhci_hcd vhci_hcd.0: stop threads [ 585.892035][ T12] vhci_hcd vhci_hcd.0: release socket [ 585.893893][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 585.895662][ T12] vhci_hcd vhci_hcd.0: stop threads [ 585.898237][ T12] vhci_hcd vhci_hcd.0: release socket [ 585.900432][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 585.907938][ T12] vhci_hcd vhci_hcd.0: stop threads [ 585.910081][ T12] vhci_hcd vhci_hcd.0: release socket [ 585.912123][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 585.914409][ T12] vhci_hcd vhci_hcd.0: stop threads [ 585.916379][ T12] vhci_hcd vhci_hcd.0: release socket [ 585.919184][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 585.921602][T10935] vhci_hcd vhci_hcd.0: stop threads [ 585.924001][T10935] vhci_hcd vhci_hcd.0: release socket [ 585.925902][T10935] vhci_hcd vhci_hcd.0: disconnect device [ 585.929698][T19555] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 586.296481][T19605] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5729'. [ 586.540732][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.544228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.857700][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.067333][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 587.219027][ T29] usb 5-1: config index 0 descriptor too short (expected 45, got 28) [ 587.222216][ T29] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 587.224575][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 587.231662][ T29] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 587.235656][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.239198][ T29] usb 5-1: Product: syz [ 587.240932][ T29] usb 5-1: Manufacturer: syz [ 587.242838][ T29] usb 5-1: SerialNumber: syz [ 587.568251][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.571890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.820298][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 587.825200][T13217] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 588.218082][T19665] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 588.230908][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 588.325471][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5767'. [ 588.328977][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5767'. [ 588.617356][ T60] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 588.617535][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.623495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.775135][ T60] usb 13-1: unable to get BOS descriptor or descriptor too short [ 588.779000][ T60] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 588.782168][ T60] usb 13-1: can't read configurations, error -71 [ 589.344120][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 589.344135][ T42] audit: type=1800 audit(1786148533.486:4963): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 589.374162][ T42] audit: type=1800 audit(1786148533.516:4964): pid=19677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5763" name="driver_override" dev="sysfs" ino=2498 res=0 errno=0 [ 589.394866][ T42] audit: type=1800 audit(1786148533.536:4965): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 589.445416][ T42] audit: type=1800 audit(1786148533.586:4966): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 589.471115][T19683] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd1f [ 589.506433][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5768'. [ 589.511731][ T42] audit: type=1800 audit(1786148533.656:4967): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 589.519628][T19685] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5768'. [ 589.551787][ T42] audit: type=1800 audit(1786148533.696:4968): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 589.574514][T19689] syzkaller1: tun_chr_ioctl cmd 35108 [ 589.641915][ T42] audit: type=1800 audit(1786148533.786:4969): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34889 res=0 errno=0 [ 589.650701][ T843] usb 5-1: USB disconnect, device number 8 [ 589.653611][ T42] audit: type=1800 audit(1786148533.796:4970): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34912 res=0 errno=0 [ 589.806041][ T42] audit: type=1800 audit(1786148533.946:4971): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 589.881952][T19714] C: renamed from veth1_to_team (while UP) [ 589.885843][ T42] audit: type=1800 audit(1786148534.026:4972): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 589.887059][T19714] netlink: 'syz.8.5780': attribute type 2 has an invalid length. [ 589.897991][T19714] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5780'. [ 589.901033][T19714] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 589.992240][T19722] netlink: 'syz.8.5784': attribute type 9 has an invalid length. [ 590.071520][T19728] bond0: entered promiscuous mode [ 590.073887][T19728] bond_slave_0: entered promiscuous mode [ 590.076538][T19728] bond_slave_1: entered promiscuous mode [ 590.081699][T19728] batadv0: entered promiscuous mode [ 590.087592][T19728] debugfs: 'hsr1' already exists in 'hsr' [ 590.089040][T19730] netlink: 200 bytes leftover after parsing attributes in process `syz.7.5788'. [ 590.090150][T19728] Cannot create hsr debugfs directory [ 590.099443][T19728] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 590.105602][T19728] bond0: left promiscuous mode [ 590.108300][T19728] bond_slave_0: left promiscuous mode [ 590.110953][T19728] bond_slave_1: left promiscuous mode [ 590.114436][T19728] batadv0: left promiscuous mode [ 590.232618][T19742] netlink: 'syz.0.5792': attribute type 14 has an invalid length. [ 590.292641][T13217] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 590.297437][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 591.034322][T19765] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 591.045948][T19765] CIFS: Attempting to mount //127.0.0.1/share [ 591.056351][T19765] CIFS: VFS: Error connecting to socket. Aborting operation. [ 591.059743][T19765] CIFS: VFS: cifs_mount failed w/return code = -111 [ 591.233000][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5805'. [ 591.236374][T19754] ceph: No mds server is up or the cluster is laggy [ 591.486748][T19792] CIFS: Attempting to mount //127.0.0.1/share [ 591.494908][T19792] CIFS: VFS: Error connecting to socket. Aborting operation. [ 591.501005][T19792] CIFS: VFS: cifs_mount failed w/return code = -111 [ 591.959337][ T5815] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 592.222574][ T5831] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 592.227566][T19826] bond0: entered promiscuous mode [ 592.229698][T19826] bond_slave_0: entered promiscuous mode [ 592.232304][T19826] bond_slave_1: entered promiscuous mode [ 592.236741][T19826] batadv0: entered promiscuous mode [ 592.246621][T19826] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 592.254286][T19826] bond0: left promiscuous mode [ 592.264603][T19826] bond_slave_0: left promiscuous mode [ 592.268515][T19826] bond_slave_1: left promiscuous mode [ 592.273002][T19826] batadv0: left promiscuous mode [ 592.285398][T19832] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5835'. [ 592.290149][T19832] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5835'. [ 592.406487][T19836] netlink: 'syz.7.5830': attribute type 14 has an invalid length. [ 592.642113][T19852] netlink: 200 bytes leftover after parsing attributes in process `syz.8.5836'. [ 592.681432][T19855] bond0: entered promiscuous mode [ 592.683174][T19855] bond_slave_0: entered promiscuous mode [ 592.685048][T19855] bond_slave_1: entered promiscuous mode [ 592.686946][T19855] bond1: entered promiscuous mode [ 592.689555][T19855] batadv0: entered promiscuous mode [ 592.694322][T19855] debugfs: 'hsr1' already exists in 'hsr' [ 592.696228][T19855] Cannot create hsr debugfs directory [ 592.698011][T19855] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 592.701028][T19855] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 592.705828][T19855] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 592.709307][T19855] bond0: left promiscuous mode [ 592.710818][T19855] bond_slave_0: left promiscuous mode [ 592.712685][T19855] bond_slave_1: left promiscuous mode [ 592.714389][T19855] bond1: left promiscuous mode [ 592.716363][T19855] batadv0: left promiscuous mode [ 592.737650][ T5831] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 592.800342][T19809] ceph: No mds server is up or the cluster is laggy [ 593.369528][T19915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5874'. [ 593.374735][T19915] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5874'. [ 593.429831][T19924] bond0: entered promiscuous mode [ 593.431371][T19924] bond_slave_0: entered promiscuous mode [ 593.433325][T19924] bond_slave_1: entered promiscuous mode [ 593.440100][T19924] batadv0: entered promiscuous mode [ 593.444064][T19924] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 593.460256][T19924] bond0: left promiscuous mode [ 593.461780][T19924] bond_slave_0: left promiscuous mode [ 593.463994][T19924] bond_slave_1: left promiscuous mode [ 593.469837][T19924] batadv0: left promiscuous mode [ 593.654853][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5880'. [ 593.663947][T19946] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5880'. [ 594.554622][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 594.554641][ T42] audit: type=1326 audit(1786148538.696:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.5904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 594.577331][ T42] audit: type=1326 audit(1786148538.696:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.5904" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 594.584513][ T42] audit: type=1326 audit(1786148538.696:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.5904" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 594.593817][ T42] audit: type=1326 audit(1786148538.696:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.5904" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 594.594603][T20005] input: syz0 as /devices/virtual/input/input35 [ 594.608766][ T42] audit: type=1326 audit(1786148538.696:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.5904" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 594.617411][ T42] audit: type=1326 audit(1786148538.696:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.5904" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 594.626339][ T42] audit: type=1326 audit(1786148538.696:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.5904" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 594.635553][ T42] audit: type=1326 audit(1786148538.696:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.5904" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 594.643518][ T42] audit: type=1326 audit(1786148538.696:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.5904" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 594.656251][ T42] audit: type=1326 audit(1786148538.696:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.5904" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 594.729282][T13217] Bluetooth: hci1: unexpected subevent 0x05 length: 10 < 12 [ 595.162597][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5926'. [ 595.189236][T20053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5928'. [ 595.190627][T20052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5927'. [ 595.216553][T13217] Bluetooth: hci2: unexpected subevent 0x05 length: 10 < 12 [ 595.441359][ T5815] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 595.531755][T20091] input: syz0 as /devices/virtual/input/input36 [ 595.708011][ T5815] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 595.761545][T20098] team0: Cannot enslave team device to itself [ 596.104004][T20116] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 596.106771][ T41] Bluetooth: hci4: Frame reassembly failed (-84) [ 596.207584][ T5816] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 596.218175][ T5815] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 596.269749][T20079] ceph: No mds server is up or the cluster is laggy [ 596.439121][ T5816] usb 11-1: unable to get BOS descriptor or descriptor too short [ 596.442744][ T5816] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 596.445162][ T5816] usb 11-1: can't read configurations, error -71 [ 596.863827][T20148] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 596.868552][T20148] CPU: 0 UID: 0 PID: 20148 Comm: syz.7.5972 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 596.868574][T20148] Tainted: [L]=SOFTLOCKUP [ 596.868578][T20148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 596.868587][T20148] Call Trace: [ 596.868591][T20148] [ 596.868595][T20148] dump_stack_lvl+0x100/0x190 [ 596.868615][T20148] sysfs_warn_dup.cold+0x1c/0x28 [ 596.868635][T20148] sysfs_create_dir_ns+0x24b/0x2b0 [ 596.868655][T20148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 596.868672][T20148] ? find_held_lock+0x2b/0x80 [ 596.868687][T20148] ? kobject_add_internal+0x25f/0x930 [ 596.868702][T20148] ? kobject_add_internal+0x25f/0x930 [ 596.868718][T20148] ? class_dir_child_ns_type+0xd/0x60 [ 596.868746][T20148] kobject_add_internal+0x2c8/0x930 [ 596.868762][T20148] kobject_add+0x16a/0x1e0 [ 596.868776][T20148] ? __pfx_kobject_add+0x10/0x10 [ 596.868789][T20148] ? get_device_parent+0x1b3/0x4c0 [ 596.868807][T20148] ? kobject_put+0xb9/0x640 [ 596.868824][T20148] device_add+0x294/0x1970 [ 596.868836][T20148] ? lockdep_init_map_type+0x5c/0x250 [ 596.868849][T20148] ? __pfx_device_add+0x10/0x10 [ 596.868860][T20148] ? lockdep_init_map_type+0x5c/0x250 [ 596.868873][T20148] ? __init_waitqueue_head+0xca/0x150 [ 596.868891][T20148] tty_register_device_attr+0x388/0x7f0 [ 596.868908][T20148] ? lockdep_init_map_type+0x5c/0x250 [ 596.868919][T20148] ? __pfx_tty_register_device_attr+0x10/0x10 [ 596.868937][T20148] ? tty_port_init+0x156/0x1c0 [ 596.868955][T20148] gsm_activate_mux+0x155/0x2a0 [ 596.868971][T20148] gsmld_ioctl+0xbbc/0x15c0 [ 596.868985][T20148] ? __pfx_gsmld_ioctl+0x10/0x10 [ 596.869004][T20148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 596.869025][T20148] ? __pfx_gsmld_ioctl+0x10/0x10 [ 596.869035][T20148] tty_compat_ioctl+0x396/0x420 [ 596.869050][T20148] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 596.869066][T20148] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 596.869085][T20148] __do_fast_syscall_32+0xe7/0x970 [ 596.869104][T20148] do_fast_syscall_32+0x32/0x70 [ 596.869120][T20148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 596.869134][T20148] RIP: 0023:0xf7fc7fec [ 596.869149][T20148] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 596.869154][T20148] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 596.869165][T20148] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 596.869172][T20148] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 596.869179][T20148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.869185][T20148] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 596.869191][T20148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 596.869205][T20148] [ 596.869217][T20148] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 597.338548][T20163] __nla_validate_parse: 7 callbacks suppressed [ 597.338565][T20163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5978'. [ 597.625881][T20177] jffs2: notice: (20177) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 597.737319][ T5823] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 597.931870][ T5823] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 597.935038][ T5823] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 597.942081][ T5823] usb 12-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 597.945234][ T5823] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.949056][ T5823] usb 12-1: Product: syz [ 597.950498][ T5823] usb 12-1: Manufacturer: syz [ 597.952381][ T5823] usb 12-1: SerialNumber: syz [ 597.974515][T20201] netlink: 'syz.6.5996': attribute type 10 has an invalid length. [ 597.980225][T20201] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5996'. [ 598.131418][T13217] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 598.280018][T20220] kAFS: Invalid Command on /proc/fs/afs/cells file [ 598.425441][T20234] ip6erspan0: entered allmulticast mode [ 598.755587][T20260] jffs2: notice: (20260) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 598.994159][T20277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6031'. [ 599.063900][T20283] jffs2: notice: (20283) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 599.169655][T20292] netlink: 'syz.0.6037': attribute type 10 has an invalid length. [ 599.184456][T20292] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6037'. [ 599.226617][T20295] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 599.231272][T20295] CPU: 3 UID: 0 PID: 20295 Comm: syz.6.6036 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 599.231306][T20295] Tainted: [L]=SOFTLOCKUP [ 599.231313][T20295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 599.231326][T20295] Call Trace: [ 599.231332][T20295] [ 599.231339][T20295] dump_stack_lvl+0x100/0x190 [ 599.231371][T20295] sysfs_warn_dup.cold+0x1c/0x28 [ 599.231402][T20295] sysfs_create_dir_ns+0x24b/0x2b0 [ 599.231433][T20295] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 599.231462][T20295] ? find_held_lock+0x2b/0x80 [ 599.231488][T20295] ? kobject_add_internal+0x25f/0x930 [ 599.231509][T20295] ? kobject_add_internal+0x25f/0x930 [ 599.231532][T20295] ? class_dir_child_ns_type+0xd/0x60 [ 599.231565][T20295] kobject_add_internal+0x2c8/0x930 [ 599.231590][T20295] kobject_add+0x16a/0x1e0 [ 599.231609][T20295] ? __pfx_kobject_add+0x10/0x10 [ 599.231628][T20295] ? get_device_parent+0x1b3/0x4c0 [ 599.231655][T20295] ? kobject_put+0xb9/0x640 [ 599.231679][T20295] device_add+0x294/0x1970 [ 599.231695][T20295] ? lockdep_init_map_type+0x5c/0x250 [ 599.231714][T20295] ? __pfx_device_add+0x10/0x10 [ 599.231728][T20295] ? lockdep_init_map_type+0x5c/0x250 [ 599.231744][T20295] ? __init_waitqueue_head+0xca/0x150 [ 599.231770][T20295] tty_register_device_attr+0x388/0x7f0 [ 599.231799][T20295] ? lockdep_init_map_type+0x5c/0x250 [ 599.231820][T20295] ? __pfx_tty_register_device_attr+0x10/0x10 [ 599.231851][T20295] ? tty_port_init+0x156/0x1c0 [ 599.231881][T20295] gsm_activate_mux+0x155/0x2a0 [ 599.231908][T20295] gsmld_ioctl+0xbbc/0x15c0 [ 599.231932][T20295] ? __pfx_gsmld_ioctl+0x10/0x10 [ 599.231969][T20295] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.232002][T20295] ? __pfx_gsmld_ioctl+0x10/0x10 [ 599.232018][T20295] tty_compat_ioctl+0x396/0x420 [ 599.232041][T20295] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 599.232066][T20295] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 599.232098][T20295] __do_fast_syscall_32+0xe7/0x970 [ 599.232128][T20295] do_fast_syscall_32+0x32/0x70 [ 599.232154][T20295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.232177][T20295] RIP: 0023:0xf702efec [ 599.232207][T20295] Code: Unable to access opcode bytes at 0xf702efc2. [ 599.232217][T20295] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 599.232237][T20295] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 599.232252][T20295] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.232263][T20295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.232273][T20295] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 599.232283][T20295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.232308][T20295] [ 599.232331][T20295] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 600.033689][T20333] : renamed from vlan0 (while UP) [ 600.266087][T20351] kvm: kvm [20350]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008a) = 0x39 [ 600.293339][ T42] kauditd_printk_skb: 3070 callbacks suppressed [ 600.293358][ T42] audit: type=1800 audit(1786148544.436:8085): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268036 res=0 errno=0 [ 600.514882][ T5823] usb 12-1: USB disconnect, device number 3 [ 600.515712][ T42] audit: type=1800 audit(1786148544.656:8086): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35239 res=0 errno=0 [ 600.529893][ T42] audit: type=1800 audit(1786148544.656:8087): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35262 res=0 errno=0 [ 600.547401][ T42] audit: type=1800 audit(1786148544.686:8088): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 600.714593][ T42] audit: type=1800 audit(1786148544.856:8089): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268055 res=0 errno=0 [ 600.738921][ T42] audit: type=1800 audit(1786148544.856:8090): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268067 res=0 errno=0 [ 600.761428][ T42] audit: type=1800 audit(1786148544.866:8091): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268079 res=0 errno=0 [ 600.774307][T20381] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 600.775714][ T42] audit: type=1800 audit(1786148544.866:8092): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268091 res=0 errno=0 [ 600.780379][T20381] CPU: 1 UID: 0 PID: 20381 Comm: syz.8.6075 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 600.780402][T20381] Tainted: [L]=SOFTLOCKUP [ 600.780407][T20381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 600.780415][T20381] Call Trace: [ 600.780419][T20381] [ 600.780445][T20381] dump_stack_lvl+0x100/0x190 [ 600.780465][T20381] sysfs_warn_dup.cold+0x1c/0x28 [ 600.780488][T20381] sysfs_create_dir_ns+0x24b/0x2b0 [ 600.780509][T20381] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 600.780525][T20381] ? find_held_lock+0x2b/0x80 [ 600.780539][T20381] ? kobject_add_internal+0x25f/0x930 [ 600.780553][T20381] ? kobject_add_internal+0x25f/0x930 [ 600.780566][T20381] ? class_dir_child_ns_type+0xd/0x60 [ 600.780586][T20381] kobject_add_internal+0x2c8/0x930 [ 600.780600][T20381] kobject_add+0x16a/0x1e0 [ 600.780614][T20381] ? __pfx_kobject_add+0x10/0x10 [ 600.780631][T20381] ? get_device_parent+0x1b3/0x4c0 [ 600.780651][T20381] ? kobject_put+0xb9/0x640 [ 600.780671][T20381] device_add+0x294/0x1970 [ 600.780686][T20381] ? lockdep_init_map_type+0x5c/0x250 [ 600.780703][T20381] ? __pfx_device_add+0x10/0x10 [ 600.780718][T20381] ? lockdep_init_map_type+0x5c/0x250 [ 600.780735][T20381] ? __init_waitqueue_head+0xca/0x150 [ 600.780761][T20381] tty_register_device_attr+0x388/0x7f0 [ 600.780785][T20381] ? lockdep_init_map_type+0x5c/0x250 [ 600.780801][T20381] ? __pfx_tty_register_device_attr+0x10/0x10 [ 600.780830][T20381] ? tty_port_init+0x156/0x1c0 [ 600.780858][T20381] gsm_activate_mux+0x155/0x2a0 [ 600.780883][T20381] gsmld_ioctl+0xbbc/0x15c0 [ 600.780906][T20381] ? __pfx_gsmld_ioctl+0x10/0x10 [ 600.780942][T20381] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 600.780975][T20381] ? __pfx_gsmld_ioctl+0x10/0x10 [ 600.780990][T20381] tty_compat_ioctl+0x396/0x420 [ 600.781012][T20381] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 600.781028][T20381] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 600.781049][T20381] __do_fast_syscall_32+0xe7/0x970 [ 600.781069][T20381] do_fast_syscall_32+0x32/0x70 [ 600.781086][T20381] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 600.781102][T20381] RIP: 0023:0xf7f27fec [ 600.781117][T20381] Code: Unable to access opcode bytes at 0xf7f27fc2. [ 600.781123][T20381] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 600.781135][T20381] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 600.781142][T20381] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 600.781149][T20381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 600.781155][T20381] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 600.781162][T20381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 600.781177][T20381] [ 600.781194][T20381] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 600.786421][ T42] audit: type=1800 audit(1786148544.866:8093): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268103 res=0 errno=0 [ 600.902710][ T42] audit: type=1800 audit(1786148544.876:8094): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268115 res=0 errno=0 [ 601.470171][T20413] block nbd1: Unsupported socket: should be TCP or UNIX. [ 601.546510][T20422] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 601.550216][T20422] CPU: 1 UID: 0 PID: 20422 Comm: syz.0.6092 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 601.550250][T20422] Tainted: [L]=SOFTLOCKUP [ 601.550257][T20422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 601.550270][T20422] Call Trace: [ 601.550278][T20422] [ 601.550286][T20422] dump_stack_lvl+0x100/0x190 [ 601.550316][T20422] sysfs_warn_dup.cold+0x1c/0x28 [ 601.550348][T20422] sysfs_create_dir_ns+0x24b/0x2b0 [ 601.550380][T20422] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 601.550407][T20422] ? find_held_lock+0x2b/0x80 [ 601.550430][T20422] ? kobject_add_internal+0x25f/0x930 [ 601.550452][T20422] ? kobject_add_internal+0x25f/0x930 [ 601.550477][T20422] ? class_dir_child_ns_type+0xd/0x60 [ 601.550510][T20422] kobject_add_internal+0x2c8/0x930 [ 601.550534][T20422] kobject_add+0x16a/0x1e0 [ 601.550554][T20422] ? __pfx_kobject_add+0x10/0x10 [ 601.550574][T20422] ? get_device_parent+0x1b3/0x4c0 [ 601.550600][T20422] ? kobject_put+0xb9/0x640 [ 601.550625][T20422] device_add+0x294/0x1970 [ 601.550643][T20422] ? lockdep_init_map_type+0x5c/0x250 [ 601.550662][T20422] ? __pfx_device_add+0x10/0x10 [ 601.550678][T20422] ? lockdep_init_map_type+0x5c/0x250 [ 601.550704][T20422] ? __init_waitqueue_head+0xca/0x150 [ 601.550731][T20422] tty_register_device_attr+0x388/0x7f0 [ 601.550760][T20422] ? lockdep_init_map_type+0x5c/0x250 [ 601.550781][T20422] ? __pfx_tty_register_device_attr+0x10/0x10 [ 601.550817][T20422] ? tty_port_init+0x156/0x1c0 [ 601.550850][T20422] gsm_activate_mux+0x155/0x2a0 [ 601.550880][T20422] gsmld_ioctl+0xbbc/0x15c0 [ 601.550905][T20422] ? __pfx_gsmld_ioctl+0x10/0x10 [ 601.550942][T20422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 601.550977][T20422] ? __pfx_gsmld_ioctl+0x10/0x10 [ 601.550993][T20422] tty_compat_ioctl+0x396/0x420 [ 601.551019][T20422] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 601.551045][T20422] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 601.551078][T20422] __do_fast_syscall_32+0xe7/0x970 [ 601.551111][T20422] do_fast_syscall_32+0x32/0x70 [ 601.551139][T20422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 601.551164][T20422] RIP: 0023:0xf7fa3fec [ 601.551185][T20422] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 601.551195][T20422] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 601.551216][T20422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 601.551230][T20422] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 601.551243][T20422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 601.551255][T20422] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 601.551268][T20422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 601.551296][T20422] [ 601.551318][T20422] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 601.752602][T20435] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 601.757705][T20435] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 601.760255][T20435] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 601.762633][T20435] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 601.765045][T20435] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 601.767618][T20435] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 601.772568][T20435] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 601.775020][T20435] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 601.778436][T20435] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 601.780934][T20435] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 601.838596][T20444] block nbd1: Unsupported socket: should be TCP or UNIX. [ 602.279127][T20473] ieee802154 phy0 wpan0: encryption failed: -22 [ 602.827864][ T5823] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 603.016708][ T5823] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 603.020033][ T5823] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 603.026298][ T5823] usb 13-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 603.029584][ T5823] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.032267][ T5823] usb 13-1: Product: syz [ 603.033619][ T5823] usb 13-1: Manufacturer: syz [ 603.035280][ T5823] usb 13-1: SerialNumber: syz [ 603.217415][ T5816] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 603.395059][T20543] dyndbg: expected <4096 bytes into control [ 603.462119][ T5816] usb 11-1: unable to get BOS descriptor or descriptor too short [ 603.470339][ T5816] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 603.473500][ T5816] usb 11-1: can't read configurations, error -71 [ 604.192008][T20593] 8021q: adding VLAN 0 to HW filter on device bond4 [ 604.196687][T20593] bond0: (slave bond4): Enslaving as an active interface with an up link [ 604.525500][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6190'. [ 604.529920][T20629] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6190'. [ 604.748894][T20651] nbd: socks must be embedded in a SOCK_ITEM attr [ 604.753840][T20651] block nbd1: shutting down sockets [ 605.315777][ T42] kauditd_printk_skb: 185 callbacks suppressed [ 605.315795][ T42] audit: type=1800 audit(1786148549.456:8280): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 605.364373][T20695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.369791][T20695] bond0: (slave bond1): Enslaving as an active interface with an up link [ 605.411369][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6223'. [ 605.415622][T20698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6223'. [ 605.425936][ T42] audit: type=1800 audit(1786148549.566:8281): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 605.496637][ T42] audit: type=1800 audit(1786148549.636:8282): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 605.526438][T20706] netlink: 'syz.7.6227': attribute type 7 has an invalid length. [ 605.536847][ T42] audit: type=1800 audit(1786148549.676:8283): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34889 res=0 errno=0 [ 605.545888][ T42] audit: type=1800 audit(1786148549.676:8284): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34912 res=0 errno=0 [ 605.563014][ T42] audit: type=1800 audit(1786148549.706:8285): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 605.587329][ T5823] usb 13-1: USB disconnect, device number 6 [ 605.620573][ T42] audit: type=1800 audit(1786148549.766:8286): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 605.639137][ T42] audit: type=1800 audit(1786148549.776:8287): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270248 res=0 errno=0 [ 605.652159][ T42] audit: type=1800 audit(1786148549.796:8288): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270260 res=0 errno=0 [ 605.665013][ T42] audit: type=1800 audit(1786148549.796:8289): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270272 res=0 errno=0 [ 605.757901][ T5888] logitech-hidpp-device 0005:046D:B012.0006: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 605.777329][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 605.869733][T13217] Bluetooth: hci1: Malformed HCI Event [ 605.933597][ T5823] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 605.948441][ T5823] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 605.970051][ T5823] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 606.076468][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 606.085281][ T29] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 606.088309][ T29] usb 5-1: can't read configurations, error -71 [ 606.254762][T20764] Bluetooth: hci4: Frame reassembly failed (-84) [ 607.391828][T20811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6275'. [ 607.396266][T20811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6275'. [ 608.297358][T13217] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 608.368854][T20853] loop4: detected capacity change from 0 to 7 [ 608.378129][ C2] blk_print_req_error: 60 callbacks suppressed [ 608.378148][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.384162][ C2] buffer_io_error: 60 callbacks suppressed [ 608.384178][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 608.404899][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.408715][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 608.412163][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.415876][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 608.419514][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.423249][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 608.426472][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.430204][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 608.433759][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.437542][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 608.445734][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.449478][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 608.452705][T20853] ldm_validate_partition_table(): Disk read failed. [ 608.455355][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.458958][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 608.462446][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.466466][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 608.470121][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.473836][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 608.477150][T20853] Dev loop4: unable to read RDB block 0 [ 608.480557][T20853] loop4: unable to read partition table [ 608.482515][T20853] loop4: partition table beyond EOD, truncated [ 608.484685][T20853] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 608.517375][ T5823] kernel read not supported for file /dsp1 (pid: 5823 comm: kworker/0:4) [ 608.890265][T20873] block2mtd: illegal erase size [ 608.950153][T20872] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 608.956571][T20872] block device autoloading is deprecated and will be removed. [ 609.511114][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 609.525788][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 609.530072][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 609.539593][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 609.543115][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 609.814318][T20898] lo speed is unknown, defaulting to 1000 [ 610.134750][T20898] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.137632][T20898] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.139928][T20898] bridge_slave_0: entered allmulticast mode [ 610.144772][T20898] bridge_slave_0: entered promiscuous mode [ 610.166844][ T12] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.170950][ T12] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.191766][T20898] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.194436][T20898] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.197059][T20898] bridge_slave_1: entered allmulticast mode [ 610.200370][T20898] bridge_slave_1: entered promiscuous mode [ 610.218168][T20898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.224255][T20898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.241928][T20898] team0: Port device team_slave_0 added [ 610.245359][T20898] team0: Port device team_slave_1 added [ 610.266763][T20898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.269250][T20898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.277773][T20898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.286683][ T12] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.290805][ T12] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.306481][T20898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.309095][T20898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.317738][T20898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.342809][T20898] hsr_slave_0: entered promiscuous mode [ 610.345225][T20898] hsr_slave_1: entered promiscuous mode [ 610.348069][T20898] debugfs: 'hsr0' already exists in 'hsr' [ 610.349941][T20898] Cannot create hsr debugfs directory [ 610.358433][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 610.358448][ T42] audit: type=1800 audit(1786148554.506:8328): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=278051 res=0 errno=0 [ 610.372911][ T42] audit: type=1800 audit(1786148554.516:8329): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=278062 res=0 errno=0 [ 610.375602][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 610.389311][ T12] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.392164][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 610.393421][ T12] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.396115][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 610.409713][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 610.413743][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 610.435068][ T42] audit: type=1800 audit(1786148554.576:8330): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=278688 res=0 errno=0 [ 610.447833][ T42] audit: type=1800 audit(1786148554.586:8331): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=278846 res=0 errno=0 [ 610.498334][ T12] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.501510][ T12] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.524322][ T42] audit: type=1800 audit(1786148554.666:8332): pid=20898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27302 res=0 errno=0 [ 610.552535][T20898] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.599830][ T42] audit: type=1800 audit(1786148554.746:8333): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279568 res=0 errno=0 [ 610.612684][ T42] audit: type=1800 audit(1786148554.756:8334): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=279573 res=0 errno=0 [ 610.625581][ T42] audit: type=1800 audit(1786148554.756:8335): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=279577 res=0 errno=0 [ 610.638882][ T42] audit: type=1800 audit(1786148554.756:8336): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=279576 res=0 errno=0 [ 610.645002][ T42] audit: type=1800 audit(1786148554.756:8337): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=279579 res=0 errno=0 [ 610.682727][T20898] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.707931][ T12] bridge_slave_1: left promiscuous mode [ 610.711871][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.720028][ T12] bridge_slave_0: left allmulticast mode [ 610.721871][ T12] bridge_slave_0: left promiscuous mode [ 610.724041][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.910813][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.920098][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.925518][ T12] bond0 (unregistering): Released all slaves [ 610.989979][T20936] lo speed is unknown, defaulting to 1000 [ 611.025033][T20898] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.070837][ T12] ovs-system: left promiscuous mode [ 611.128718][T20898] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.158620][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 611.238077][ T12] tipc: Left network mode [ 611.554413][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10 [ 611.635812][T20898] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 611.642450][T20898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 611.646905][T20898] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 611.647396][ T5749] Bluetooth: hci2: command tx timeout [ 611.658786][T20898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 611.663147][T20898] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 611.670363][T20898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 611.693431][T20898] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 611.706544][T20898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 611.786313][ T12] hsr_slave_0: left promiscuous mode [ 611.792425][ T12] hsr_slave_1: left promiscuous mode [ 611.795410][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.799365][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.803606][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.806076][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.824867][ T12] veth1_macvtap: left promiscuous mode [ 611.829392][ T12] veth0_macvtap: left promiscuous mode [ 611.831870][ T12] veth1_vlan: left promiscuous mode [ 611.836646][ T12] veth0_vlan: left promiscuous mode [ 612.062333][ T12] team0 (unregistering): Port device team_slave_1 removed [ 612.070752][ T12] team0 (unregistering): Port device team_slave_0 removed [ 612.157435][T20936] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.160598][T20936] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.163793][T20936] bridge_slave_0: entered allmulticast mode [ 612.168003][T20936] bridge_slave_0: entered promiscuous mode [ 612.176989][ T5445] 8021q: adding VLAN 0 to HW filter on device eth11 [ 612.185054][T20936] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.188347][T20936] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.191532][T20936] bridge_slave_1: entered allmulticast mode [ 612.195618][T20936] bridge_slave_1: entered promiscuous mode [ 612.231167][T20936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.238088][T20936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.264314][T20936] team0: Port device team_slave_0 added [ 612.279156][T20936] team0: Port device team_slave_1 added [ 612.304241][T20936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.309649][T20936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.319860][T20936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.326100][T20936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.329276][T20936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.339764][T20936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.398976][T20936] hsr_slave_0: entered promiscuous mode [ 612.402291][T20936] hsr_slave_1: entered promiscuous mode [ 612.405260][T20936] debugfs: 'hsr0' already exists in 'hsr' [ 612.408268][T20936] Cannot create hsr debugfs directory [ 612.448082][ T5749] Bluetooth: hci1: command tx timeout [ 612.504149][T20898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.520269][ T5445] 8021q: adding VLAN 0 to HW filter on device eth12 [ 612.589180][T20898] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.598606][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.601745][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.680996][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.684107][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.081557][T20898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.234222][T20936] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 613.241519][T20936] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 613.246436][T20936] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 613.254533][T20936] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.258561][T20936] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 613.264242][T20936] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.267944][T20936] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 613.277985][T20936] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.319514][T20898] veth0_vlan: entered promiscuous mode [ 613.334624][T20898] veth1_vlan: entered promiscuous mode [ 613.368738][T20898] veth0_macvtap: entered promiscuous mode [ 613.374514][T20898] veth1_macvtap: entered promiscuous mode [ 613.389066][T20936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.395378][T20898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.405506][T20898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.411607][T20936] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.424656][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.426969][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.434778][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.437216][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.469647][T10961] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.507524][T10961] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.511607][T10961] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.525914][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.532598][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.583981][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.587991][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.597298][T10935] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.732102][ T5749] Bluetooth: hci2: command tx timeout [ 613.802592][T20936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.037024][T21098] smpboot: CPU 1 is now offline [ 614.105376][T20936] veth0_vlan: entered promiscuous mode [ 614.123017][T20936] veth1_vlan: entered promiscuous mode [ 614.145520][T21098] smpboot: CPU 3 is now offline [ 614.188678][T20936] veth0_macvtap: entered promiscuous mode [ 614.196591][T20936] veth1_macvtap: entered promiscuous mode [ 614.221854][T20936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.235895][T20936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.270292][T10935] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.277796][T10935] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.285699][T10935] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.337238][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.385753][T21113] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 614.450357][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.464039][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.527557][ T5749] Bluetooth: hci1: command tx timeout [ 614.532755][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.535323][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.094396][T21162] blkio.reset_stats is deprecated [ 615.303616][ T5445] veth1_vlan: left promiscuous mode [ 615.388265][ T42] kauditd_printk_skb: 61 callbacks suppressed [ 615.388277][ T42] audit: type=1800 audit(1786148559.536:8399): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290112 res=0 errno=0 [ 615.402411][T21188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6388'. [ 615.413771][T21188] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6388'. [ 615.417958][T21188] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6388'. [ 615.442218][ T42] audit: type=1800 audit(1786148559.586:8400): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 615.541741][ T42] audit: type=1800 audit(1786148559.686:8401): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 615.687298][T10961] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.709355][ T42] audit: type=1800 audit(1786148559.856:8402): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290247 res=0 errno=0 [ 615.733480][T21209] overlayfs: workdir and upperdir must reside under the same mount [ 615.738049][ T5445] veth1_vlan: entered promiscuous mode [ 615.751963][ T42] audit: type=1800 audit(1786148559.896:8403): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290266 res=0 errno=0 [ 615.770419][ T42] audit: type=1800 audit(1786148559.896:8404): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=290270 res=0 errno=0 [ 615.908949][T21221] kAFS: bad VL server IP address [ 616.433184][ T42] audit: type=1800 audit(1786148560.576:8405): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 616.480417][ T42] audit: type=1800 audit(1786148560.626:8406): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 616.520693][ T42] audit: type=1800 audit(1786148560.666:8407): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 616.573686][ T42] audit: type=1800 audit(1786148560.716:8408): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 616.603354][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6413'. [ 616.606417][T21264] netlink: 'syz.7.6413': attribute type 21 has an invalid length. [ 616.608999][ T5749] Bluetooth: hci1: command tx timeout [ 617.008509][ T5749] Bluetooth: hci2: command tx timeout [ 617.110757][T21277] loop5: detected capacity change from 0 to 7 [ 617.126201][T21277] Dev loop5: unable to read RDB block 7 [ 617.129686][T21277] loop5: unable to read partition table [ 617.133070][T21277] loop5: partition table beyond EOD, truncated [ 617.139584][T21277] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 617.301107][T21286] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 617.385918][T21294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6427'. [ 617.561735][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6432'. [ 617.571254][T21310] netlink: 'syz.8.6432': attribute type 21 has an invalid length. [ 617.625377][T21314] loop5: detected capacity change from 0 to 7 [ 617.637132][T21314] Dev loop5: unable to read RDB block 7 [ 617.639812][T21314] loop5: unable to read partition table [ 617.645935][T21314] loop5: partition table beyond EOD, truncated [ 617.656780][T21314] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 618.689191][ T5749] Bluetooth: hci1: command tx timeout [ 619.655098][T21407] kAFS: bad VL server IP address [ 619.837291][T16099] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 619.990343][T16099] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 619.995073][T16099] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 620.006303][T16099] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 620.010332][T16099] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 620.025108][T16099] usb 12-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 620.029650][T16099] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.036596][T16099] usb 12-1: Product: syz [ 620.042947][T16099] usb 12-1: Manufacturer: syz [ 620.047833][T16099] usb 12-1: SerialNumber: syz [ 620.397293][ T42] kauditd_printk_skb: 1095 callbacks suppressed [ 620.397307][ T42] audit: type=1326 audit(1786148564.536:9504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.8.6474" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704f008 code=0x7ffc0000 [ 620.418101][ T42] audit: type=1326 audit(1786148564.556:9505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.8.6474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 620.437642][ T42] audit: type=1326 audit(1786148564.556:9506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.8.6474" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704f008 code=0x7ffc0000 [ 620.446196][ T42] audit: type=1326 audit(1786148564.556:9507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.8.6474" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704f008 code=0x7ffc0000 [ 620.466007][ T42] audit: type=1326 audit(1786148564.556:9508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.8.6474" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704f008 code=0x7ffc0000 [ 620.474903][ T42] audit: type=1326 audit(1786148564.556:9509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.8.6474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 620.483546][ T42] audit: type=1326 audit(1786148564.556:9510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.8.6474" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704f008 code=0x7ffc0000 [ 620.492041][ T42] audit: type=1326 audit(1786148564.556:9511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.8.6474" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704f008 code=0x7ffc0000 [ 620.500768][ T42] audit: type=1326 audit(1786148564.556:9512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.8.6474" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704f008 code=0x7ffc0000 [ 620.509770][ T42] audit: type=1326 audit(1786148564.566:9513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.8.6474" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704f008 code=0x7ffc0000 [ 620.623117][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6477'. [ 620.631497][T21422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6477'. [ 622.571403][ T5823] usb 12-1: USB disconnect, device number 4 [ 622.688806][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.117974][ T5888] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 623.209597][T21476] Invalid ELF header magic: != ELF [ 623.269232][ T5888] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 623.275318][ T5888] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 623.279810][ T5888] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 623.283321][ T5888] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 623.289140][ T5888] usb 13-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 623.294321][ T5888] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.297705][ T5888] usb 13-1: Product: syz [ 623.299329][ T5888] usb 13-1: Manufacturer: syz [ 623.299421][T21480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6501'. [ 623.300941][ T5888] usb 13-1: SerialNumber: syz [ 623.780896][T21497] block nbd6: not configured, cannot reconfigure [ 624.419361][T21504] bond0: entered promiscuous mode [ 624.422659][T21504] bond_slave_0: entered promiscuous mode [ 624.424671][T21504] bond_slave_1: entered promiscuous mode [ 624.426716][T21504] bond1: entered promiscuous mode [ 624.434159][T21504] batadv0: entered promiscuous mode [ 624.436803][T21504] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 624.444786][T21504] bond0: left promiscuous mode [ 624.446380][T21504] bond_slave_0: left promiscuous mode [ 624.448765][T21504] bond_slave_1: left promiscuous mode [ 624.450752][T21504] bond1: left promiscuous mode [ 624.453194][T21504] batadv0: left promiscuous mode [ 625.892085][ T5888] usb 13-1: USB disconnect, device number 7 [ 625.920330][T21547] netlink: 27 bytes leftover after parsing attributes in process `syz.6.6531'. [ 626.148478][T21563] IPv6: NLM_F_CREATE should be specified when creating new route [ 626.163216][T21566] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 626.253671][ T42] kauditd_printk_skb: 1445 callbacks suppressed [ 626.253683][ T42] audit: type=1800 audit(1786148570.396:10959): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 626.345716][ T42] audit: type=1800 audit(1786148570.486:10960): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 626.383004][ T5522] kernel write not supported for file /uinput (pid: 5522 comm: kworker/0:3) [ 626.493087][T21585] CIFS: Attempting to mount //127.0.0.1/share [ 626.544552][T21585] CIFS: VFS: Error connecting to socket. Aborting operation. [ 626.552550][T21585] CIFS: VFS: cifs_mount failed w/return code = -111 [ 626.810871][ T42] audit: type=1800 audit(1786148570.956:10961): pid=21605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6558" name="quirks" dev="sysfs" ino=62695 res=0 errno=0 [ 627.025612][ T42] audit: type=1800 audit(1786148571.156:10962): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 627.052460][ T42] audit: type=1800 audit(1786148571.186:10963): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290879 res=0 errno=0 [ 627.124824][ T42] audit: type=1800 audit(1786148571.266:10964): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 627.175831][ T42] audit: type=1800 audit(1786148571.316:10965): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 627.233886][ T42] audit: type=1800 audit(1786148571.376:10966): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 627.252829][T21636] netlink: 'syz.7.6572': attribute type 8 has an invalid length. [ 627.324839][ T42] audit: type=1800 audit(1786148571.466:10967): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 627.357984][ T42] audit: type=1800 audit(1786148571.506:10968): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 627.477466][T21654] netlink: 'syz.0.6578': attribute type 10 has an invalid length. [ 627.488138][ T36] ================================================================== [ 627.490703][ T36] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 627.493904][ T36] Read of size 1 at addr ffff888027bcd409 by task kworker/u33:0/36 [ 627.497591][ T36] [ 627.498978][ T36] CPU: 2 UID: 0 PID: 36 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 627.498996][ T36] Tainted: [L]=SOFTLOCKUP [ 627.499000][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 627.499009][ T36] Workqueue: events_unbound commit_work [ 627.499027][ T36] Call Trace: [ 627.499032][ T36] [ 627.499037][ T36] dump_stack_lvl+0x100/0x190 [ 627.499052][ T36] print_report+0x13d/0x4b0 [ 627.499069][ T36] ? __virt_addr_valid+0x239/0x430 [ 627.499085][ T36] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 627.499100][ T36] kasan_report+0xdf/0x1c0 [ 627.499119][ T36] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 627.499136][ T36] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 627.499152][ T36] ? preempt_schedule_common+0x42/0xc0 [ 627.499170][ T36] ? preempt_schedule_thunk+0x16/0x40 [ 627.499189][ T36] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 627.499205][ T36] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 627.499219][ T36] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 627.499236][ T36] drm_atomic_helper_commit_tail+0xff/0x130 [ 627.499252][ T36] commit_tail+0x338/0x430 [ 627.499268][ T36] process_one_work+0xa23/0x1940 [ 627.499287][ T36] ? __pfx_process_one_work+0x10/0x10 [ 627.499306][ T36] ? __pfx_commit_work+0x10/0x10 [ 627.499321][ T36] worker_thread+0x5ef/0xe50 [ 627.499339][ T36] ? kthread+0x13a/0x450 [ 627.499354][ T36] ? __pfx_worker_thread+0x10/0x10 [ 627.499370][ T36] kthread+0x370/0x450 [ 627.499385][ T36] ? __pfx_kthread+0x10/0x10 [ 627.499399][ T36] ret_from_fork+0x72b/0xd50 [ 627.499414][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 627.499431][ T36] ? __switch_to+0x800/0x10f0 [ 627.499449][ T36] ? __pfx_kthread+0x10/0x10 [ 627.499464][ T36] ret_from_fork_asm+0x1a/0x30 [ 627.499483][ T36] [ 627.499486][ T36] [ 627.558338][ T36] Allocated by task 21653: [ 627.559761][ T36] kasan_save_stack+0x30/0x50 [ 627.561259][ T36] kasan_save_track+0x14/0x30 [ 627.562752][ T36] __kasan_kmalloc+0xaa/0xb0 [ 627.564230][ T36] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 627.565925][ T36] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 627.568011][ T36] drm_atomic_get_crtc_state+0x1de/0x690 [ 627.569832][ T36] page_flip_common+0x59/0x320 [ 627.571349][ T36] drm_atomic_helper_page_flip+0xb6/0x180 [ 627.573149][ T36] drm_mode_page_flip_ioctl+0x1095/0x14a0 [ 627.574942][ T36] drm_ioctl_kernel+0x1f3/0x3e0 [ 627.576483][ T36] drm_ioctl+0x5e6/0xc60 [ 627.577933][ T36] drm_compat_ioctl+0x386/0x4c0 [ 627.579520][ T36] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 627.581250][ T36] __do_fast_syscall_32+0xe7/0x970 [ 627.582866][ T36] do_fast_syscall_32+0x32/0x70 [ 627.584408][ T36] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 627.586387][ T36] [ 627.587160][ T36] Freed by task 21650: [ 627.588560][ T36] kasan_save_stack+0x30/0x50 [ 627.590058][ T36] kasan_save_track+0x14/0x30 [ 627.591544][ T36] kasan_save_free_info+0x3b/0x70 [ 627.593143][ T36] __kasan_slab_free+0x5f/0x80 [ 627.594677][ T36] kfree+0x22b/0x6c0 [ 627.595917][ T36] drm_atomic_commit_default_clear+0x465/0x10c0 [ 627.597911][ T36] __drm_atomic_commit_free+0x185/0x2f0 [ 627.599934][ T36] drm_client_modeset_commit_atomic+0x5f3/0x7e0 [ 627.601931][ T36] drm_client_modeset_commit_locked+0x14d/0x580 [ 627.603896][ T36] drm_client_modeset_commit+0x4f/0x80 [ 627.605639][ T36] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 627.608073][ T36] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 627.610204][ T36] drm_fbdev_client_restore+0x1b/0x30 [ 627.611889][ T36] drm_client_dev_restore+0x205/0x2a0 [ 627.613585][ T36] drm_release+0x2c6/0x360 [ 627.615008][ T36] __fput+0x3ff/0xb50 [ 627.616277][ T36] task_work_run+0x150/0x240 [ 627.617759][ T36] exit_to_user_mode_loop+0x1d8/0x6f0 [ 627.619481][ T36] __do_fast_syscall_32+0x701/0x970 [ 627.621127][ T36] do_fast_syscall_32+0x32/0x70 [ 627.622680][ T36] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 627.624682][ T36] [ 627.625461][ T36] The buggy address belongs to the object at ffff888027bcd400 [ 627.625461][ T36] which belongs to the cache kmalloc-512 of size 512 [ 627.629812][ T36] The buggy address is located 9 bytes inside of [ 627.629812][ T36] freed 512-byte region [ffff888027bcd400, ffff888027bcd600) [ 627.634038][ T36] [ 627.634835][ T36] The buggy address belongs to the physical page: [ 627.636859][ T36] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027bcfc00 pfn:0x27bcc [ 627.640013][ T36] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 627.642648][ T36] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 627.645320][ T36] page_type: f5(slab) [ 627.646599][ T36] raw: 00fff00000000240 ffff88801bc42c80 ffffea000074b010 ffffea000085ac10 [ 627.649289][ T36] raw: ffff888027bcfc00 000000080010000e 00000000f5000000 0000000000000000 [ 627.652004][ T36] head: 00fff00000000240 ffff88801bc42c80 ffffea000074b010 ffffea000085ac10 [ 627.654491][ T36] head: ffff888027bcfc00 000000080010000e 00000000f5000000 0000000000000000 [ 627.656977][ T36] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 627.660128][ T36] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 627.663044][ T36] page dumped because: kasan: bad access detected [ 627.665248][ T36] page_owner tracks the page as allocated [ 627.666991][ T36] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kworker/u33:0), ts 527564477034, free_ts 526667049940 [ 627.673464][ T36] post_alloc_hook+0xfd/0x120 [ 627.674992][ T36] get_page_from_freelist+0xf48/0x3530 [ 627.676725][ T36] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 627.678605][ T36] new_slab+0xa2/0x640 [ 627.679906][ T36] refill_objects+0xe3/0x410 [ 627.681378][ T36] __pcs_replace_empty_main+0x376/0x680 [ 627.683114][ T36] __kmalloc_noprof+0x66d/0x820 [ 627.684655][ T36] fib6_info_alloc+0x40/0x160 [ 627.686158][ T36] ip6_route_info_create+0x14c/0xad0 [ 627.687811][ T36] addrconf_f6i_alloc+0x2d9/0x670 [ 627.689427][ T36] ipv6_add_addr+0x580/0x1fb0 [ 627.690910][ T36] addrconf_add_linklocal+0x2a5/0x500 [ 627.692601][ T36] addrconf_addr_gen+0x364/0x3b0 [ 627.694173][ T36] addrconf_init_auto_addrs+0x1cb/0x780 [ 627.695971][ T36] addrconf_notify+0xa10/0x1ba0 [ 627.697536][ T36] notifier_call_chain+0x99/0x3f0 [ 627.699177][ T36] page last free pid 16023 tgid 16023 stack trace: [ 627.701237][ T36] __free_frozen_pages+0x79f/0x1090 [ 627.702891][ T36] qlist_free_all+0x47/0xf0 [ 627.704340][ T36] kasan_quarantine_reduce+0x1a0/0x1f0 [ 627.706187][ T36] __kasan_slab_alloc+0x69/0x90 [ 627.707700][ T36] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 627.709334][ T36] fib_table_insert+0x761/0x1c70 [ 627.710898][ T36] fib_magic+0x4d4/0x5c0 [ 627.712257][ T36] fib_add_ifaddr+0x16d/0x560 [ 627.713754][ T36] fib_inetaddr_event+0x147/0x270 [ 627.715351][ T36] notifier_call_chain+0x99/0x3f0 [ 627.716949][ T36] blocking_notifier_call_chain+0x69/0xa0 [ 627.718776][ T36] __inet_insert_ifa+0x91d/0xc70 [ 627.720358][ T36] inet_rtm_newaddr+0xea1/0x18b0 [ 627.721936][ T36] rtnetlink_rcv_msg+0x95e/0xe90 [ 627.723509][ T36] netlink_rcv_skb+0x159/0x420 [ 627.725039][ T36] netlink_unicast+0x585/0x850 [ 627.726559][ T36] [ 627.727331][ T36] Memory state around the buggy address: [ 627.729123][ T36] ffff888027bcd300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 627.731624][ T36] ffff888027bcd380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 627.734163][ T36] >ffff888027bcd400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 627.736682][ T36] ^ [ 627.738066][ T36] ffff888027bcd480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 627.740563][ T36] ffff888027bcd500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 627.743065][ T36] ================================================================== [ 627.751901][T21654] team0: Device wg2 is of different type SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 627.792297][ T36] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 627.794667][ T36] CPU: 2 UID: 0 PID: 36 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 627.798096][ T36] Tainted: [L]=SOFTLOCKUP [ 627.799468][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 627.802693][ T36] Workqueue: events_unbound commit_work [ 627.804462][ T36] Call Trace: [ 627.805530][ T36] [ 627.806484][ T36] dump_stack_lvl+0x100/0x190 [ 627.807977][ T36] vpanic+0x552/0x970 [ 627.809266][ T36] ? __pfx_vpanic+0x10/0x10 [ 627.810717][ T36] ? mark_held_locks+0x40/0x70 [ 627.812246][ T36] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 627.814536][ T36] panic+0xd1/0xe0 [ 627.815734][ T36] ? __pfx_panic+0x10/0x10 [ 627.817164][ T36] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 627.819463][ T36] ? preempt_schedule_common+0x42/0xc0 [ 627.821204][ T36] ? check_panic_on_warn+0x1f/0x90 [ 627.822840][ T36] check_panic_on_warn.cold+0x19/0x34 [ 627.824551][ T36] end_report.part.0+0x3a/0x90 [ 627.826070][ T36] kasan_report.cold+0xe/0x18 [ 627.827569][ T36] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 627.829863][ T36] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 627.832066][ T36] ? preempt_schedule_common+0x42/0xc0 [ 627.833800][ T36] ? preempt_schedule_thunk+0x16/0x40 [ 627.835525][ T36] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 627.837909][ T36] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 627.839781][ T36] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 627.841813][ T36] drm_atomic_helper_commit_tail+0xff/0x130 [ 627.843673][ T36] commit_tail+0x338/0x430 [ 627.845111][ T36] process_one_work+0xa23/0x1940 [ 627.846680][ T36] ? __pfx_process_one_work+0x10/0x10 [ 627.848413][ T36] ? __pfx_commit_work+0x10/0x10 [ 627.849985][ T36] worker_thread+0x5ef/0xe50 [ 627.851457][ T36] ? kthread+0x13a/0x450 [ 627.852849][ T36] ? __pfx_worker_thread+0x10/0x10 [ 627.854465][ T36] kthread+0x370/0x450 [ 627.855778][ T36] ? __pfx_kthread+0x10/0x10 [ 627.857251][ T36] ret_from_fork+0x72b/0xd50 [ 627.858734][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 627.860357][ T36] ? __switch_to+0x800/0x10f0 [ 627.861854][ T36] ? __pfx_kthread+0x10/0x10 [ 627.863342][ T36] ret_from_fork_asm+0x1a/0x30 [ 627.864908][ T36] [ 627.866412][ T36] Kernel Offset: disabled [ 627.867801][ T36] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:14:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000020007 RBX=ffff88802a4831f8 RCX=0000000000000000 RDX=0000000000000007 RSI=ffff88802a4831d0 RDI=ffffffff8ebe8000 RBP=ffff88802a482540 RSP=ffffc9000b95f2e8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000007 R13=0000000000000007 R14=0000000000000000 R15=0000000000020000 RIP=ffffffff81e5547b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bf3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f755c0 CR3=0000000047531000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000018800000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b52eaa RDX=ffff88801c352540 RSI=ffffffff81b52ece RDI=ffff88801c352540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b52ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f955c0 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0ddf5 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc900005f74b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b6e31e7 R15=ffffffff85a0dd90 RIP=ffffffff85a0de1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096df3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7486288 CR3=000000004e114000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b52eaa RDX=ffff88801c702540 RSI=ffffffff81b52ece RDI=ffff88801c702540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b52ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f9a190 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 706900306e616c76 706900316e616c76 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000