last executing test programs: 2m9.222944201s ago: executing program 1 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) setresuid(r1, 0x0, r3) 2m9.148218559s ago: executing program 1 (id=400): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) 2m9.081834086s ago: executing program 1 (id=403): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x14}, {@in6=@mcast2, 0x4d4, 0x32}, @in=@rand_addr=0x64010100, {0x0, 0x800000000192, 0x6, 0x3, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2m9.081117827s ago: executing program 1 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x93cd, 0x10000, 0x0, 0x4e}, &(0x7f0000000980)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m9.013636336s ago: executing program 1 (id=407): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000004c0)=""/134) 2m8.665477347s ago: executing program 1 (id=412): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m8.609449996s ago: executing program 32 (id=412): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m5.154993766s ago: executing program 2 (id=457): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff8000}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x11}, 0x1c) 2m4.84006494s ago: executing program 2 (id=465): setresuid(0xee01, 0xee00, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x79fb, 0x40000, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0xa84e5475952f9a3}], 0x1}, 0x40001002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m4.793826948s ago: executing program 2 (id=467): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x9, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x3, 0x32, 0x0, 0x9}, 0x9c) 2m4.683181719s ago: executing program 2 (id=469): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x93cd, 0x10000, 0x0, 0x4e}, &(0x7f0000000980)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m4.675021663s ago: executing program 2 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x2a6, 0xb, 0x7a}) 2m4.330214138s ago: executing program 2 (id=477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @adapter={0xde, 0x10001, 0x100000001, 0x97, 0xb}}]}) 2m4.271579981s ago: executing program 33 (id=477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @adapter={0xde, 0x10001, 0x100000001, 0x97, 0xb}}]}) 1m47.311400124s ago: executing program 0 (id=782): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x801, 0x109) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) write(r0, &(0x7f00000005c0)='1', 0x1) 1m47.22928314s ago: executing program 0 (id=784): r0 = syz_ublk_setup_io_uring(0xd61, &(0x7f0000000500)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0xfffffffd, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x2, 0x80000002, 0x359}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x1e3}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x2, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1462, 0x10f00, 0x1, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x100, 0x5, 0x3b7, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x5, 0x44a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x20000, 0x80000000, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x96e8, 0x0, 0x2, 0x40021a, 0x0, r7}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x1, 0x48b, 0x0, 0x0}}, 0x0) 1m47.060350487s ago: executing program 3 (id=787): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0xe0000000}) fcntl$setpipe(r1, 0x407, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, r3, 0x3, 0x2}}}, 0x90) 1m46.952939946s ago: executing program 3 (id=788): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xa4, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="bf01"], 0xdd12}], 0x1}, 0x200400d1) 1m46.875140123s ago: executing program 3 (id=790): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close(0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 1m46.825297301s ago: executing program 3 (id=792): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 1m46.81642639s ago: executing program 3 (id=794): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x8a, 0x0, &(0x7f0000001800), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0xfffffffffffffff6, 0xffffffffffffffff, 0x24, {0x5, 0xffffffffc12b59bc}, 0x2}, 0x1) 1m46.537411938s ago: executing program 0 (id=801): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0xffcc) 1m46.441406885s ago: executing program 3 (id=802): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x2) 1m46.365000524s ago: executing program 34 (id=802): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x2) 1m46.321035052s ago: executing program 0 (id=804): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x0, 0x6e, 0x8, &(0x7f0000000000)={0x2, "6f5fe95f410000000000b59c000073ef440427000000bda900"}}) 1m43.281467818s ago: executing program 0 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) 1m42.648626435s ago: executing program 0 (id=822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3a04) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x8, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x8, r2, 0x1}) 1m27.314649172s ago: executing program 35 (id=822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3a04) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x8, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x8, r2, 0x1}) 53.504130787s ago: executing program 7 (id=1562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 53.388796559s ago: executing program 7 (id=1569): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x300, 0x0, 0x1, 0x1, 0x0, 0x6}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000000c0)=0x7f, 0x4) sendto$inet6(r0, &(0x7f0000000180)="c412", 0xffe6, 0x40, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) 53.330832277s ago: executing program 7 (id=1571): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x2, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 53.244681005s ago: executing program 7 (id=1575): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 53.17178185s ago: executing program 7 (id=1579): r0 = syz_io_uring_setup(0x1060, &(0x7f00000003c0)={0x0, 0x50b6, 0x2, 0x3, 0x167}, &(0x7f0000000500), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r0, 0xfffffdff, 0xe875, 0x27, 0x0, 0x2000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 52.907268474s ago: executing program 7 (id=1584): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(xeta-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) 52.858760081s ago: executing program 36 (id=1584): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(xeta-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) 2.318969229s ago: executing program 5 (id=2283): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) 2.266886719s ago: executing program 4 (id=2286): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x402, &(0x7f0000000780)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x60000, 0x2a8f2}}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4004004) 2.120862394s ago: executing program 5 (id=2288): unshare(0x10000000) unshare(0x40000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x405, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={&(0x7f0000000000), 0x10, &(0x7f0000000500)={&(0x7f0000000600)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000700)={&(0x7f0000000000), 0x10, &(0x7f0000000800)={&(0x7f0000000900)={0x44, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0) 2.06915741s ago: executing program 4 (id=2290): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x453, 0x800, 0x70bd2b, 0x25dfdbff}, 0x2008d}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 1.965996218s ago: executing program 8 (id=2292): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x4000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x5, 0x1) getdents64(r0, 0x0, 0x0) 1.931586087s ago: executing program 8 (id=2293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000140), 0x400000000000287, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) close(r0) 1.861706034s ago: executing program 5 (id=2295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x80000001}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.856282715s ago: executing program 4 (id=2296): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.649178832s ago: executing program 4 (id=2297): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.648757334s ago: executing program 5 (id=2298): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000280)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 1.587667786s ago: executing program 5 (id=2299): r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.587379769s ago: executing program 4 (id=2300): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSBRKP(r1, 0x541e, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000"], 0x50) 913.905807ms ago: executing program 6 (id=2301): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000005780)='./file0\x00', 0x9400002f) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x3) umount2(&(0x7f0000000000)='./file0\x00', 0x2) 905.618292ms ago: executing program 8 (id=2309): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x10, 0x2ac257408d4d5c71, @fd_index, 0x9, 0x0, 0x0, 0x1, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 795.050796ms ago: executing program 6 (id=2302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 774.821928ms ago: executing program 8 (id=2303): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0xfea9}, {&(0x7f0000002e40)="d4"}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}, {{0x0, 0x57, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0xffffffb6}], 0x1}}], 0x4, 0x4000084) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 746.113079ms ago: executing program 6 (id=2304): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x1382, &(0x7f0000002740)={@local, @dev, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1344, 0x6, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1e}, {[], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffd}}}}}}}, 0x0) 678.992384ms ago: executing program 8 (id=2305): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg(r1, &(0x7f00000001c0), 0x39, 0x20004010) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 678.724734ms ago: executing program 6 (id=2306): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000e0301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x4e, 0xfa00, {0x4, 0x0}}, 0x20) close(0x4) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0x3, 0x8, 0x3, 0x500, 0xe, 0x9, 0x40, 0xb000200}) 576.05444ms ago: executing program 8 (id=2307): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 568.02288ms ago: executing program 5 (id=2308): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 111.156374ms ago: executing program 6 (id=2310): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write(r1, &(0x7f0000000040), 0xffffff4a) 75.283278ms ago: executing program 4 (id=2311): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/snd_hda_intel/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 46202403\x00', 0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0000:00:00.0\x00', 0xd) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 0s ago: executing program 6 (id=2312): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) rmdir(&(0x7f0000000040)='./file1\x00') chdir(&(0x7f0000000000)='./bus\x00') unlink(&(0x7f0000000100)='./file0\x00') kernel console output (not intermixed with test programs): Interface deactivated: batadv_slave_0 [ 80.383619][ T7381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.391872][ T7381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.395016][ T7381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.403990][ T7381] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 80.427238][ T7384] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 80.440309][ T7385] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.445795][ T7385] bond0: (slave team0): Enslaving as an active interface with an up link [ 80.511225][ T7395] PM: suspend entry (s2idle) [ 80.512783][ T7395] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 80.524127][ T7395] PM: suspend exit [ 80.603473][ T42] audit: type=1804 audit(1786197142.373:10): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.541" name="/newroot/115/file0" dev="tmpfs" ino=627 res=1 errno=0 [ 80.759239][ T7418] sctp: [Deprecated]: syz.5.547 (pid 7418) Use of int in max_burst socket option deprecated. [ 80.759239][ T7418] Use struct sctp_assoc_value instead [ 80.862202][ T7423] netlink: 'syz.5.550': attribute type 1 has an invalid length. [ 80.864999][ T7425] PM: suspend entry (s2idle) [ 80.866973][ T7425] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 80.870207][ T7425] PM: suspend exit [ 81.005305][ T7432] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 81.015017][ T7432] bond1: (slave lo): Enslaving as an active interface with an up link [ 81.025322][ T7432] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 81.032191][ T7430] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 81.034129][ T7430] syzkaller0: Linktype set failed because interface is up [ 82.118856][ T7454] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 82.218416][ T7460] loop5: detected capacity change from 0 to 7 [ 82.236984][ T7460] Dev loop5: unable to read RDB block 7 [ 82.246090][ T7460] loop5: unable to read partition table [ 82.248473][ T7460] loop5: partition table beyond EOD, truncated [ 82.252727][ T7460] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 82.381832][ T64] Bluetooth: hci2: command tx timeout [ 83.289538][ T7438] lo speed is unknown, defaulting to 1000 [ 83.464185][ T7481] bridge0: entered allmulticast mode [ 83.551487][ T7486] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 83.575847][ T7486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.602426][ T7486] bond1: (slave geneve2): making interface the new active one [ 83.605836][ T7486] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 84.315334][ T7543] thunderbolt 0000:00:00.0: error -EINVAL: cannot obtain PCI resources, aborting [ 84.319172][ T7543] thunderbolt 0000:00:00.0: probe with driver thunderbolt failed with error -22 [ 84.366222][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 84.409976][ T7550] vlan2: entered allmulticast mode [ 84.453526][ T64] Bluetooth: hci2: command tx timeout [ 84.476637][ T7558] printk: legacy console [ttyGS0] disabled [ 85.223196][ T7627] binder: 7626:7627 ioctl c0306201 800001c0 returned -14 [ 85.345371][ T7631] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 85.357329][ T7631] bond1: (slave lo): Enslaving as an active interface with an up link [ 85.363131][ T7631] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 85.456889][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 85.460407][ T7642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.464537][ T7642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.470431][ T7642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.479617][ T7642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.909864][ T7669] lo speed is unknown, defaulting to 1000 [ 85.955145][ T7674] netlink: 164 bytes leftover after parsing attributes in process `syz.5.631'. [ 85.972109][ T7674] netlink: 36 bytes leftover after parsing attributes in process `syz.5.631'. [ 86.317559][ T7691] jffs2: notice: (7691) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 86.335908][ T7694] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 86.388370][ T7694] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 86.392952][ T7694] overlayfs: failed to look up (tracing) for ino (-66) [ 86.614997][ T7703] pci_bus 0000:01: busn_res: [bus 01] is released [ 86.668772][ T7705] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 86.689568][ T7705] pci 0000:00:04.0: PCI bridge to [bus 01] [ 86.691850][ T7705] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 86.694937][ T7705] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 86.705229][ T7705] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 86.713409][ T7705] pci 0000:00:04.0: enabling Extended Tags [ 86.767946][ T7705] pci 0000:00:04.0: Adding to iommu group 4 [ 86.798795][ T7709] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 86.799517][ T7705] pci 0000:00:04.0: PCI bridge to [bus 01] [ 86.830096][ T7705] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 86.845463][ T7705] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 86.851853][ T7705] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 86.855435][ T7705] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 86.859657][ T7705] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 86.863370][ T7705] pci 0000:00:04.0: PCI bridge to [bus 01] [ 86.866102][ T7705] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 86.872308][ T7705] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 86.877483][ T7705] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 87.033641][ T7705] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 87.057804][ T7705] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 87.257226][ T7724] evm: overlay not supported [ 87.385914][ T7734] netlink: 32 bytes leftover after parsing attributes in process `syz.0.656'. [ 87.488568][ T7744] jffs2: notice: (7744) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.497334][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 87.500937][ T7742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.504046][ T7742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.514204][ T7742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.517707][ T7742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.625221][ T42] audit: type=1800 audit(1786197149.383:11): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.664" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 87.985347][ T7769] jffs2: notice: (7769) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.097675][ T42] audit: type=1326 audit(1786197149.863:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.0.684" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 88.128289][ T7780] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 88.582751][ T7803] jffs2: notice: (7803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.695382][ T7812] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.717019][ T7812] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 88.720167][ T7812] overlayfs: failed to look up (tracing) for ino (-66) [ 89.098382][ T7823] mmap: syz.5.698 (7823) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.213788][ T7834] nbd3: detected capacity change from 0 to 8 [ 89.226955][ T7836] block nbd3: shutting down sockets [ 89.234063][ C3] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.237980][ C3] buffer_io_error: 9 callbacks suppressed [ 89.237989][ C3] Buffer I/O error on dev nbd3, logical block 0, async page read [ 89.248610][ T35] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.251932][ T35] Buffer I/O error on dev nbd3, logical block 0, async page read [ 89.257035][ T35] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.260090][ T35] Buffer I/O error on dev nbd3, logical block 0, async page read [ 89.262768][ T35] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.265784][ T35] Buffer I/O error on dev nbd3, logical block 0, async page read [ 89.268329][ T35] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.272596][ T35] Buffer I/O error on dev nbd3, logical block 0, async page read [ 89.277771][ T35] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.280818][ T35] Buffer I/O error on dev nbd3, logical block 0, async page read [ 89.283619][ T1295] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.286630][ T1295] Buffer I/O error on dev nbd3, logical block 0, async page read [ 89.291550][ T2113] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.294447][ T7840] jffs2: notice: (7840) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 89.294541][ T2113] Buffer I/O error on dev nbd3, logical block 0, async page read [ 89.303556][ T5733] ldm_validate_partition_table(): Disk read failed. [ 89.306432][ T5133] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.310238][ T5133] Buffer I/O error on dev nbd3, logical block 0, async page read [ 89.315442][ T5133] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.319241][ T5133] Buffer I/O error on dev nbd3, logical block 0, async page read [ 89.323590][ T5733] Dev nbd3: unable to read RDB block 0 [ 89.326241][ T5733] nbd3: unable to read partition table [ 89.328762][ T5733] nbd3: partition table beyond EOD, truncated [ 89.344939][ T5144] ldm_validate_partition_table(): Disk read failed. [ 89.348083][ T5144] Dev nbd3: unable to read RDB block 0 [ 89.350026][ T5144] nbd3: unable to read partition table [ 89.352289][ T5144] nbd3: partition table beyond EOD, truncated [ 89.356736][ T5733] ldm_validate_partition_table(): Disk read failed. [ 89.359826][ T5733] Dev nbd3: unable to read RDB block 0 [ 89.362478][ T5733] nbd3: unable to read partition table [ 89.364997][ T5733] nbd3: partition table beyond EOD, truncated [ 89.690318][ T7874] jffs2: notice: (7874) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 90.207705][ T7918] jffs2: notice: (7918) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 90.300267][ T7921] bridge_slave_0: left allmulticast mode [ 90.303176][ T7921] bridge_slave_0: left promiscuous mode [ 90.305157][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.331368][ T7921] bridge_slave_1: left allmulticast mode [ 90.333247][ T7921] bridge_slave_1: left promiscuous mode [ 90.335165][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.343845][ T7923] netlink: 'syz.0.722': attribute type 10 has an invalid length. [ 90.350204][ T7921] bond0: (slave bond_slave_0): Releasing backup interface [ 90.369148][ T7921] bond0: (slave bond_slave_1): Releasing backup interface [ 90.389823][ T7921] team0: Port device team_slave_0 removed [ 90.396052][ T7927] netlink: 'syz.0.722': attribute type 10 has an invalid length. [ 90.409002][ T7921] team0: Port device team_slave_1 removed [ 90.414321][ T7921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.417523][ T7921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.422551][ T7921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.426309][ T7921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.432528][ T7921] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.446432][ T7923] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 90.465119][ T7927] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.470820][ T7927] bond0: (slave team0): Enslaving as an active interface with an up link [ 90.592266][ T7931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.594944][ T7931] bridge0: port 1(bond2) entered blocking state [ 90.597635][ T7931] bridge0: port 1(bond2) entered disabled state [ 90.599873][ T7931] bond2: entered allmulticast mode [ 90.616002][ T7931] bond2: entered promiscuous mode [ 90.625281][ T7931] bridge0: port 1(bond2) entered blocking state [ 90.628288][ T7931] bridge0: port 1(bond2) entered forwarding state [ 90.645438][ T7514] bridge0: port 1(bond2) entered disabled state [ 90.827125][ T7943] jffs2: notice: (7943) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.080888][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 91.084666][ T7959] netlink: 'syz.0.737': attribute type 10 has an invalid length. [ 91.091142][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'. [ 91.105236][ T7959] geneve3: entered promiscuous mode [ 91.107015][ T7959] geneve3: entered allmulticast mode [ 91.195931][ T7967] jffs2: notice: (7967) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.243753][ T5524] libceph: connect (1)[c::]:6789 error -101 [ 91.247490][ T5524] libceph: mon0 (1)[c::]:6789 connect error [ 91.288855][ T4913] libceph: connect (1)[c::]:6789 error -101 [ 91.290953][ T4913] libceph: mon0 (1)[c::]:6789 connect error [ 91.513638][ T5524] libceph: connect (1)[c::]:6789 error -101 [ 91.516306][ T5524] libceph: mon0 (1)[c::]:6789 connect error [ 91.564070][ T4913] libceph: connect (1)[c::]:6789 error -101 [ 91.567021][ T4913] libceph: mon0 (1)[c::]:6789 connect error [ 91.748676][ T7999] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xef70 instead [ 91.753090][ T7999] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x118e instead [ 91.757152][ T7999] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe838 instead [ 91.762412][ T7999] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x70c7 instead [ 91.766598][ T7999] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x6a04 instead [ 91.770774][ T7999] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2396 instead [ 91.775675][ T7999] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xce27 instead [ 91.779892][ T7999] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8e39 instead [ 91.784174][ T7999] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xd445 instead [ 91.788394][ T7999] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1f6b instead [ 91.793149][ T7999] jffs2: Further such events for this erase block will not be printed [ 91.797285][ T7999] jffs2: notice: (7999) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.924669][ T8011] lo speed is unknown, defaulting to 1000 [ 92.023453][ T5524] libceph: connect (1)[c::]:6789 error -101 [ 92.029203][ T5524] libceph: mon0 (1)[c::]:6789 connect error [ 92.065112][ T7975] ceph: No mds server is up or the cluster is laggy [ 92.067107][ T7970] ceph: No mds server is up or the cluster is laggy [ 92.073483][ T4913] libceph: connect (1)[c::]:6789 error -101 [ 92.073722][ T4913] libceph: mon0 (1)[c::]:6789 connect error [ 92.487577][ T42] audit: type=1326 audit(1786197154.253:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.4.768" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x0 [ 92.516156][ T8036] lo speed is unknown, defaulting to 1000 [ 92.896172][ T8071] loop5: detected capacity change from 0 to 7 [ 92.906335][ T8071] Dev loop5: unable to read RDB block 7 [ 92.908680][ T8071] loop5: unable to read partition table [ 92.910651][ T8071] loop5: partition table beyond EOD, truncated [ 92.913167][ T8071] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 93.004240][ T8076] kvm: apic: phys broadcast and lowest prio [ 93.005854][ T8079] netlink: 'syz.5.783': attribute type 12 has an invalid length. [ 93.246538][ T8088] nbd5: detected capacity change from 0 to 8 [ 93.272782][ T8091] block nbd5: shutting down sockets [ 93.280089][ T5733] ldm_validate_partition_table(): Disk read failed. [ 93.283289][ T5733] Dev nbd5: unable to read RDB block 0 [ 93.287370][ T5733] nbd5: unable to read partition table [ 93.291896][ T5733] nbd5: partition table beyond EOD, truncated [ 93.298386][ T5733] ldm_validate_partition_table(): Disk read failed. [ 93.301454][ T5733] Dev nbd5: unable to read RDB block 0 [ 93.304085][ T5733] nbd5: unable to read partition table [ 93.306727][ T5733] nbd5: partition table beyond EOD, truncated [ 93.718483][ T8121] syzkaller1: entered promiscuous mode [ 93.720676][ T8121] syzkaller1: entered allmulticast mode [ 94.020840][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.024938][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.034424][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.038591][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.044847][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.247249][ T8139] lo speed is unknown, defaulting to 1000 [ 94.489482][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.491833][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.494148][ T8139] bridge_slave_0: entered allmulticast mode [ 94.496932][ T8139] bridge_slave_0: entered promiscuous mode [ 94.500405][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.502709][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.505054][ T8139] bridge_slave_1: entered allmulticast mode [ 94.507933][ T8139] bridge_slave_1: entered promiscuous mode [ 94.525979][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.530739][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.553729][ T8139] team0: Port device team_slave_0 added [ 94.558638][ T8139] team0: Port device team_slave_1 added [ 94.586636][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.589733][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.600792][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.607394][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.610507][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.622811][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.666658][ T8139] hsr_slave_0: entered promiscuous mode [ 94.670029][ T8139] hsr_slave_1: entered promiscuous mode [ 94.673122][ T8139] debugfs: 'hsr0' already exists in 'hsr' [ 94.675719][ T8139] Cannot create hsr debugfs directory [ 94.777867][ T5810] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.887653][ T5810] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.942235][ T8139] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.946759][ T8139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.949667][ T8139] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.955246][ T8139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.973388][ T5810] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.979184][ T8139] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.984147][ T8139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.987034][ T8139] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.992356][ T8139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.047229][ T5810] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.075477][ T8139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.087735][ T8139] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.096475][ T8119] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.099625][ T8119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.109122][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.112218][ T8119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.245336][ T5810] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.364941][ T5810] bridge_slave_1: left allmulticast mode [ 95.367332][ T5810] bridge_slave_1: left promiscuous mode [ 95.369906][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.377191][ T5810] bridge_slave_0: left allmulticast mode [ 95.379582][ T5810] bridge_slave_0: left promiscuous mode [ 95.382179][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.499811][ T5810] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 95.584458][ T5810] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 95.587754][ T5810] bridge1 (unregistering): left promiscuous mode [ 95.599236][ T5810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.608095][ T5810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.613742][ T5810] bond0 (unregistering): Released all slaves [ 95.621826][ T5810] bond1 (unregistering): Released all slaves [ 95.636067][ T5810] bond2 (unregistering): Released all slaves [ 95.644935][ T5446] 8021q: adding VLAN 0 to HW filter on device eth10 [ 95.699454][ T8139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.844664][ T5446] 8021q: adding VLAN 0 to HW filter on device eth11 [ 95.888639][ T8139] veth0_vlan: entered promiscuous mode [ 95.921840][ T8139] veth1_vlan: entered promiscuous mode [ 95.952924][ T8139] veth0_macvtap: entered promiscuous mode [ 95.965365][ T8139] veth1_macvtap: entered promiscuous mode [ 95.981400][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.995315][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.073430][ T5810] hsr_slave_0: left promiscuous mode [ 96.086134][ T5810] veth1_macvtap: left promiscuous mode [ 96.096643][ T5810] veth0_macvtap: left promiscuous mode [ 96.098601][ T5810] veth1_vlan: left promiscuous mode [ 96.107319][ T5810] veth0_vlan: left promiscuous mode [ 96.132835][ T64] Bluetooth: hci0: command tx timeout [ 96.301925][ T5810] team0 (unregistering): Port device team_slave_1 removed [ 96.311818][ T5810] team0 (unregistering): Port device team_slave_0 removed [ 96.423643][ T7525] smc: removing ib device syz2 [ 96.437006][ T5446] 8021q: adding VLAN 0 to HW filter on device eth12 [ 96.442868][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.443316][ T24] lo speed is unknown, defaulting to 1000 [ 96.447880][ T24] syz2: Port: 1 Link DOWN [ 96.472502][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.472890][ T7525] smbdirect: ib_dev[syz2] removed [ 96.484881][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.493249][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.520464][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.528144][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.542145][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.546995][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.585139][ T24] kernel read not supported for file /vcs (pid: 24 comm: kworker/2:0) [ 96.678366][ T8206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xef70 instead [ 96.688348][ T8206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x118e instead [ 96.692007][ T8206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe838 instead [ 96.700563][ T8206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x70c7 instead [ 96.705771][ T8206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x6a04 instead [ 96.713971][ T8206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2396 instead [ 96.719605][ T8206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xce27 instead [ 96.726009][ T8206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8e39 instead [ 96.744625][ T8206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xd445 instead [ 96.749760][ T8206] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1f6b instead [ 96.755064][ T8206] jffs2: Further such events for this erase block will not be printed [ 96.759478][ T8206] jffs2: notice: (8206) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.797390][ T5446] 8021q: adding VLAN 0 to HW filter on device eth13 [ 96.852161][ T8214] input: syz0 as /devices/virtual/input/input5 [ 96.857099][ T8218] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 97.181151][ T5446] 8021q: adding VLAN 0 to HW filter on device eth14 [ 97.462006][ T8249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.467520][ T8249] bridge0: port 3(bond1) entered blocking state [ 97.474217][ T8249] bridge0: port 3(bond1) entered disabled state [ 97.478726][ T8249] bond1: entered allmulticast mode [ 97.489637][ T8249] bond1: entered promiscuous mode [ 97.496435][ T8249] bridge0: port 3(bond1) entered blocking state [ 97.498540][ T8249] bridge0: port 3(bond1) entered forwarding state [ 97.505763][ T8118] bridge0: port 3(bond1) entered disabled state [ 98.223281][ T64] Bluetooth: hci0: command tx timeout [ 99.016049][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.836'. [ 99.018819][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.836'. [ 99.057833][ T8308] netlink: 'syz.6.837': attribute type 11 has an invalid length. [ 100.051121][ T64] Bluetooth: hci1: command 0x2016 tx timeout [ 100.301066][ T5093] Bluetooth: hci0: command tx timeout [ 100.456289][ T8348] binder: 8347:8348 ioctl 4018620d 0 returned -22 [ 101.803040][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.871'. [ 101.909867][ T8403] netlink: Unknown NAT attribute (type=16383, max=9) [ 101.913935][ T8403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.131095][ T5093] Bluetooth: hci1: command 0x2016 tx timeout [ 102.371259][ T64] Bluetooth: hci0: command tx timeout [ 102.560187][ T8417] netlink: 20 bytes leftover after parsing attributes in process `syz.6.877'. [ 102.683676][ T8417] nbd: socks must be embedded in a SOCK_ITEM attr [ 103.521490][ T8436] input: syz0 as /devices/virtual/input/input6 [ 103.576114][ T8438] bridge_slave_0: invalid flags given to default FDB implementation [ 103.579780][ T8438] bridge_slave_0: invalid flags given to default FDB implementation [ 105.434606][ T8489] vmxnet3 0000:00:00.0: Failed to map bar0 [ 105.440859][ T8489] vmxnet3 0000:00:00.0: probe with driver vmxnet3 failed with error -5 [ 106.237776][ T8502] input: syz0 as /devices/virtual/input/input7 [ 106.911822][ T8549] Bluetooth: MGMT ver 1.23 [ 106.914597][ T8549] Bluetooth: hci0: unsupported parameter 39401 [ 106.916900][ T8549] Bluetooth: hci0: unsupported parameter 512 [ 106.918782][ T8549] Bluetooth: hci0: unsupported parameter 39401 [ 106.920638][ T8549] Bluetooth: hci0: unsupported parameter 512 [ 107.734182][ T65] block nbd4: Receive control failed (result -107) [ 107.790437][ T8594] block nbd4: shutting down sockets [ 107.914044][ T5810] tipc: Subscription rejected, illegal request [ 108.451167][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.453884][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 108.458359][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 110.611972][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 110.613484][ T5093] Bluetooth: hci1: command 0x2016 tx timeout [ 110.615677][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 112.691323][ T5093] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.694108][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 112.696800][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 114.771202][ T5093] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.771213][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 114.775715][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 114.851279][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.861828][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.866971][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.883115][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.905791][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.943158][ T5093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.946741][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.952479][ T5093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.963331][ T5093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.967970][ T5093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.017271][ T5810] bond2: left allmulticast mode [ 115.023286][ T5810] bond2: left promiscuous mode [ 115.025793][ T5810] bridge0: port 1(bond2) entered disabled state [ 115.044520][ T5810] bridge0: left allmulticast mode [ 115.191651][ T6303] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 115.289370][ T5810] bond1 (unregistering): (slave geneve2): Releasing active interface [ 115.311591][ T5810] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 115.315506][ T5810] bond0 (unregistering): (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 115.339421][ T5810] bond0 (unregistering): (slave team0): Releasing backup interface [ 115.346681][ T5810] bond0 (unregistering): Released all slaves [ 115.352243][ T5810] bond1 (unregistering): Released all slaves [ 115.360827][ T5810] bond2 (unregistering): Released all slaves [ 115.361035][ T6303] usb 11-1: Using ep0 maxpacket: 8 [ 115.370254][ T6303] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.376995][ T6303] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.383534][ T6303] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.392157][ T6303] usb 11-1: config 0 descriptor?? [ 115.679596][ T6303] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 115.746268][ T42] audit: type=1326 audit(1786197177.513:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.4.984" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 115.850714][ T5810] hsr_slave_0: left promiscuous mode [ 115.857631][ T5810] hsr_slave_1: left promiscuous mode [ 115.874150][ T5810] veth1_macvtap: left promiscuous mode [ 115.877084][ T5810] veth0_macvtap: left promiscuous mode [ 115.880147][ T5810] veth1_vlan: left promiscuous mode [ 115.882687][ T5810] veth0_vlan: left promiscuous mode [ 116.097920][ T29] usb 11-1: USB disconnect, device number 2 [ 116.407013][ T8772] coredump: 288(syz.5.987): Core dump to core aborted: cannot preserve file permissions [ 116.422755][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.425421][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.427990][ T8714] bridge_slave_0: entered allmulticast mode [ 116.431987][ T8714] bridge_slave_0: entered promiscuous mode [ 116.435708][ T8714] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.438043][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.441052][ T8714] bridge_slave_1: entered allmulticast mode [ 116.444896][ T8714] bridge_slave_1: entered promiscuous mode [ 116.470626][ T8714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.476814][ T8714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.500492][ T8714] team0: Port device team_slave_0 added [ 116.505004][ T8714] team0: Port device team_slave_1 added [ 116.525772][ T8714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.528691][ T8714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.551129][ T8714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.572762][ T8714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.582440][ T8714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.597878][ T8714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.693911][ T8714] hsr_slave_0: entered promiscuous mode [ 116.698674][ T8714] hsr_slave_1: entered promiscuous mode [ 116.701975][ T8714] debugfs: 'hsr0' already exists in 'hsr' [ 116.704523][ T8714] Cannot create hsr debugfs directory [ 116.813705][ T6458] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 116.946893][ T8795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.998'. [ 116.971086][ T6458] usb 10-1: Using ep0 maxpacket: 32 [ 116.994063][ T6458] usb 10-1: unable to get BOS descriptor or descriptor too short [ 116.998336][ T6458] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 117.004086][ T6458] usb 10-1: can't read configurations, error -71 [ 117.021192][ T64] Bluetooth: hci3: command tx timeout [ 117.026151][ T8714] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 117.037029][ T8714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.043707][ T8714] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 117.051667][ T8714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.055793][ T8714] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 117.065741][ T8714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.069849][ T8714] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 117.075983][ T8714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.159926][ T8714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.178500][ T8714] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.189623][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.192823][ T8116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.207396][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.210522][ T8265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.254096][ T8816] binder: 8815:8816 ioctl c0306201 80000080 returned -14 [ 117.681256][ T8714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.923444][ T8714] veth0_vlan: entered promiscuous mode [ 117.936574][ T8714] veth1_vlan: entered promiscuous mode [ 117.973956][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1014'. [ 117.977945][ T8714] veth0_macvtap: entered promiscuous mode [ 117.988052][ T8714] veth1_macvtap: entered promiscuous mode [ 118.004946][ T8714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.019164][ T8714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.020670][ T8856] nbd: socks must be embedded in a SOCK_ITEM attr [ 118.119975][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.136132][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.147034][ T8863] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 118.149338][ T8863] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 118.152231][ T8863] vhci_hcd vhci_hcd.0: Device attached [ 118.165769][ T8864] vhci_hcd: connection closed [ 118.167124][ T5810] vhci_hcd vhci_hcd.4: stop threads [ 118.171708][ T5810] vhci_hcd vhci_hcd.4: release socket [ 118.174066][ T5810] vhci_hcd vhci_hcd.4: disconnect device [ 118.205696][ T8262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.209049][ T8262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.234908][ T5787] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.241118][ T5787] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.248139][ T8262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.251722][ T8262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.496058][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1021'. [ 118.591070][ T4913] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 118.745116][ T4913] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.757109][ T4913] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 118.765181][ T4913] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 118.773801][ T4913] usb 11-1: Product: syz [ 118.777732][ T4913] usb 11-1: Manufacturer: syz [ 118.779532][ T4913] usb 11-1: SerialNumber: syz [ 118.806738][ T8895] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1031'. [ 119.028118][ T4913] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 119.091453][ T64] Bluetooth: hci3: command tx timeout [ 119.282936][ C3] usblp0: nonzero write bulk status received: -71 [ 119.283291][ T5524] usb 11-1: USB disconnect, device number 3 [ 119.294793][ T5524] usblp0: removed [ 119.367362][ T8917] loop2: detected capacity change from 0 to 7 [ 119.376797][ T8917] Dev loop2: unable to read RDB block 7 [ 119.378633][ T8917] loop2: AHDI p1 p2 p3 [ 119.378662][ T8917] loop2: partition table partially beyond EOD, truncated [ 119.379312][ T8917] loop2: p1 start 1601398130 is beyond EOD, [ 119.383046][ T8917] truncated [ 119.386636][ T8917] loop2: p2 start 1702059890 is beyond EOD, truncated [ 119.459904][ T6458] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 119.478041][ T6458] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 120.272222][ T8962] input: syz0 as /devices/virtual/input/input8 [ 120.303832][ T5733] udevd[5733]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 120.729176][ T8969] Context (ID=0x0) not attached to queue pair (handle=0xffffffff:0x9) [ 120.855082][ T8974] syz.6.1061 (8974) used greatest stack depth: 19544 bytes left [ 121.171978][ T64] Bluetooth: hci3: command tx timeout [ 122.153609][ T6473] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 122.909643][ T5524] kernel read not supported for file /kmsg (pid: 5524 comm: kworker/0:3) [ 123.251167][ T64] Bluetooth: hci3: command tx timeout [ 123.677172][ T9069] intel_xhci_usb_sw pcspkr: probe with driver intel_xhci_usb_sw failed with error -22 [ 123.680926][ T9072] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xef70 instead [ 123.684618][ T9072] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x118e instead [ 123.688173][ T9072] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe838 instead [ 123.691675][ T9072] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x70c7 instead [ 123.694963][ T9072] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x6a04 instead [ 123.698243][ T9072] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2396 instead [ 123.701837][ T9072] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xce27 instead [ 123.705931][ T9072] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8e39 instead [ 123.709244][ T9072] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xd445 instead [ 123.714682][ T9072] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1f6b instead [ 123.719717][ T9072] jffs2: Further such events for this erase block will not be printed [ 123.724348][ T9072] jffs2: notice: (9072) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 124.005829][ T9100] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1114'. [ 124.067604][ T9102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.151836][ T42] audit: type=1326 audit(1786197185.923:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.4.1117" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 124.616334][ T9126] coredump: 247(syz.6.1121): Core dump to core aborted: cannot preserve file permissions [ 124.998677][ T9134] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1126'. [ 125.066927][ T9136] binder: 9135:9136 ioctl c400941b 0 returned -22 [ 125.197924][ T9140] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 126.049981][ T9156] netlink: 'syz.6.1137': attribute type 1 has an invalid length. [ 126.052763][ T9156] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1137'. [ 126.152399][ T9164] coredump: 438(syz.4.1132): Core dump to core aborted: cannot preserve file permissions [ 126.185899][ T40] kernel read not supported for file /kmsg (pid: 40 comm: kworker/2:1) [ 126.685705][ T9213] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1159'. [ 126.720022][ T9217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xef70 instead [ 126.724467][ T9217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x118e instead [ 126.728650][ T9217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe838 instead [ 126.733264][ T9217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x70c7 instead [ 126.737564][ T9217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x6a04 instead [ 126.742875][ T9217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2396 instead [ 126.746561][ T9217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xce27 instead [ 126.751285][ T9217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8e39 instead [ 126.754780][ T9217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xd445 instead [ 126.758200][ T9217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1f6b instead [ 126.762219][ T9217] jffs2: Further such events for this erase block will not be printed [ 126.766690][ T9217] jffs2: notice: (9217) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.828081][ T9229] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xef70 instead [ 126.832199][ T9229] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x118e instead [ 126.836323][ T9229] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe838 instead [ 126.840339][ T9229] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x70c7 instead [ 126.844521][ T9229] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x6a04 instead [ 126.847882][ T9229] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2396 instead [ 126.851392][ T9229] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xce27 instead [ 126.854705][ T9229] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8e39 instead [ 126.858753][ T9229] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xd445 instead [ 126.862985][ T9229] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1f6b instead [ 126.866955][ T9229] jffs2: Further such events for this erase block will not be printed [ 126.881374][ T9229] jffs2: notice: (9229) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.045405][ T9249] netlink: 'syz.4.1172': attribute type 4 has an invalid length. [ 127.218174][ T9258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.285632][ T9265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xef70 instead [ 127.289530][ T9265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x118e instead [ 127.297262][ T9265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe838 instead [ 127.302053][ T9265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x70c7 instead [ 127.306581][ T9265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x6a04 instead [ 127.310904][ T9265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2396 instead [ 127.315493][ T9265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xce27 instead [ 127.320443][ T9265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8e39 instead [ 127.326170][ T9265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xd445 instead [ 127.330481][ T9265] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1f6b instead [ 127.335262][ T9265] jffs2: Further such events for this erase block will not be printed [ 127.336290][ T9269] gadgetfs: bound to dummy_udc driver [ 127.339672][ T9265] jffs2: notice: (9265) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.697084][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1190'. [ 128.090915][ T9308] loop5: detected capacity change from 0 to 4095 [ 128.129581][ T9308] buffer_io_error: 75 callbacks suppressed [ 128.129596][ T9308] Buffer I/O error on dev loop5, logical block 511, async page read [ 128.135054][ T5733] Buffer I/O error on dev loop5, logical block 511, async page read [ 129.169537][ T9335] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 129.176823][ T9335] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1205'. [ 129.656353][ T9376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.008103][ T9396] ip6gretap1: entered promiscuous mode [ 130.354847][ T9417] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1233'. [ 130.457492][ T9422] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1235'. [ 130.472368][ T9422] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1235'. [ 130.777935][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1246'. [ 131.099882][ T9471] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 131.144556][ T9471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.173115][ T9473] bond2: (slave geneve2): making interface the new active one [ 131.192859][ T9473] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 131.217281][ T5787] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 131.222426][ T5787] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 131.227526][ T5787] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 131.251741][ T5787] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 131.301149][ T42] audit: type=1804 audit(1786197193.063:16): pid=9481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1259" name="/newroot/224/file1" dev="tmpfs" ino=1189 res=1 errno=0 [ 131.851837][ T5827] kernel read not supported for file /ppp (pid: 5827 comm: kworker/3:3) [ 131.966701][ T9503] netlink: 9275 bytes leftover after parsing attributes in process `syz.7.1269'. [ 132.046825][ T42] audit: type=1804 audit(1786197193.813:17): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1274" name="/newroot/195/file1" dev="tmpfs" ino=1081 res=1 errno=0 [ 132.079661][ T42] audit: type=1800 audit(1786197193.843:18): pid=9515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1275" name="use" dev="configfs" ino=27456 res=0 errno=0 [ 132.147437][ T42] audit: type=1800 audit(1786197193.913:19): pid=9519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1278" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 132.168247][ T9523] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xef70 instead [ 132.171910][ T9523] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x118e instead [ 132.175509][ T9523] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe838 instead [ 132.179058][ T9523] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x70c7 instead [ 132.183241][ T9523] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x6a04 instead [ 132.186698][ T9523] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2396 instead [ 132.190032][ T9523] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xce27 instead [ 132.193642][ T9523] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8e39 instead [ 132.197209][ T9523] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xd445 instead [ 132.200538][ T9523] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1f6b instead [ 132.204244][ T9523] jffs2: Further such events for this erase block will not be printed [ 132.207372][ T9523] jffs2: notice: (9523) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 132.373685][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.376260][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.515119][ T9543] loop5: detected capacity change from 0 to 4095 [ 132.530586][ T5885] Buffer I/O error on dev loop5, logical block 511, async page read [ 132.842134][ T5827] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 132.853730][ T9589] gadgetfs: bound to dummy_udc driver [ 132.936835][ T9593] loop5: detected capacity change from 0 to 4095 [ 132.961674][ T9593] Buffer I/O error on dev loop5, logical block 511, async page read [ 132.965126][ T5733] Buffer I/O error on dev loop5, logical block 511, async page read [ 132.992440][ T5827] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.996701][ T5827] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.002308][ T5827] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 133.005876][ T5827] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.036396][ T9606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xef70 instead [ 133.039645][ T9606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x118e instead [ 133.043284][ T9606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe838 instead [ 133.046643][ T9606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x70c7 instead [ 133.050017][ T9606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x6a04 instead [ 133.054445][ T9606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2396 instead [ 133.057769][ T9606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xce27 instead [ 133.061263][ T9606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8e39 instead [ 133.064587][ T9606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xd445 instead [ 133.068789][ T9606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1f6b instead [ 133.073939][ T9606] jffs2: Further such events for this erase block will not be printed [ 133.078280][ T9606] jffs2: notice: (9606) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 133.226466][ T56] usb 10-1: USB disconnect, device number 4 [ 134.036699][ T9635] netlink: 'syz.5.1326': attribute type 1 has an invalid length. [ 134.048920][ T9635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.057227][ T9630] loop5: detected capacity change from 0 to 4095 [ 134.078480][ T9635] bond2: (slave geneve2): making interface the new active one [ 134.081786][ T9630] Buffer I/O error on dev loop5, logical block 511, async page read [ 134.084495][ T9635] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 134.085198][ T5733] Buffer I/O error on dev loop5, logical block 511, async page read [ 134.091953][ T5787] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 134.095112][ T5787] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 134.098036][ T5787] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 134.102630][ T5787] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 134.147458][ T4913] IPVS: starting estimator thread 0... [ 134.151259][ T2318] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 134.251174][ T9640] IPVS: using max 43 ests per chain, 103200 per kthread [ 134.303552][ T50] libceph: connect (2)0.0.0.0:6789 error -22 [ 134.303928][ T2318] usb 12-1: config index 0 descriptor too short (expected 28277, got 36) [ 134.305951][ T50] libceph: ceph_tcp_connect failed: -22 [ 134.310443][ T50] libceph: mon0 (2)0.0.0.0:6789 connect error [ 134.313481][ T2318] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.321237][ T2318] usb 12-1: config 0 has no interfaces? [ 134.325628][ T2318] usb 12-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 134.329226][ T2318] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.338319][ T2318] usb 12-1: config 0 descriptor?? [ 134.456061][ T9654] batadv_slave_0: entered promiscuous mode [ 134.459471][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1333'. [ 134.482419][ T9654] batadv_slave_0 (unregistering): left promiscuous mode [ 134.555413][ T2318] usb 12-1: USB disconnect, device number 2 [ 134.581208][ T50] libceph: connect (2)0.0.0.0:6789 error -22 [ 134.583213][ T50] libceph: ceph_tcp_connect failed: -22 [ 134.585028][ T50] libceph: mon0 (2)0.0.0.0:6789 connect error [ 134.912604][ T9664] netlink: 'syz.6.1337': attribute type 1 has an invalid length. [ 134.929647][ T9664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.959990][ T9666] binder: 9661:9666 ioctl c0306201 80000480 returned -14 [ 134.963142][ T9664] bond2: (slave geneve2): making interface the new active one [ 134.966488][ T9664] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 134.992050][ T5787] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 134.995460][ T5787] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 134.998735][ T5787] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 135.002164][ T5787] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 135.092194][ T50] libceph: connect (2)0.0.0.0:6789 error -22 [ 135.098265][ T50] libceph: ceph_tcp_connect failed: -22 [ 135.104159][ T50] libceph: mon0 (2)0.0.0.0:6789 connect error [ 135.331337][ T9649] ceph: No mds server is up or the cluster is laggy [ 136.011196][ T6458] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 136.171093][ T6458] usb 10-1: Using ep0 maxpacket: 8 [ 136.174768][ T6458] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 136.179905][ T6458] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.184529][ T6458] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.188609][ T6458] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.193713][ T6458] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.200161][ T6458] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.204429][ T6458] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.212950][ T8116] rpcbind: server 127.0.0.1 not responding, timed out [ 136.334722][ T9712] tls_set_device_offload_rx: netdev not found [ 136.415549][ T6458] usb 10-1: usb_control_msg returned -32 [ 136.417903][ T6458] usbtmc 10-1:16.0: can't read capabilities [ 136.820078][ T9736] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1367'. [ 136.943055][ T9748] batadv_slave_0: entered promiscuous mode [ 136.945720][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1372'. [ 136.948850][ T9748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.961819][ T9748] batadv_slave_0 (unregistering): left promiscuous mode [ 136.964136][ T9748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.184595][ T9761] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 137.333720][ T5818] usb 10-1: USB disconnect, device number 5 [ 139.092340][ T9815] netlink: 'syz.7.1399': attribute type 2 has an invalid length. [ 139.095094][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1399'. [ 139.207535][ T9827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1404'. [ 139.947870][ T9876] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 140.645114][ T9908] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 141.718734][ T9931] i8042 aux 00:01: in use; can't configure [ 141.722338][ T9931] i8042 aux 00:01: in use; can't configure [ 141.726323][ T9931] i8042 aux 00:01: in use; can't configure [ 141.803127][ T9942] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xef70 instead [ 141.808480][ T9942] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x118e instead [ 141.813065][ T9942] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe838 instead [ 141.814905][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1454'. [ 141.819387][ T9942] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x70c7 instead [ 141.825980][ T9942] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x6a04 instead [ 141.831911][ T9942] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2396 instead [ 141.835805][ T9942] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xce27 instead [ 141.839036][ T9942] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8e39 instead [ 141.842660][ T9942] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xd445 instead [ 141.845970][ T9942] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1f6b instead [ 141.849185][ T9942] jffs2: Further such events for this erase block will not be printed [ 141.852612][ T9942] jffs2: notice: (9942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 141.935759][ T9959] nvmet: adding nsid 1 to subsystem test_subsys [ 141.941945][ T42] audit: type=1800 audit(1786197203.713:20): pid=9959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1460" name="ana_grpid" dev="configfs" ino=30513 res=0 errno=0 [ 142.967152][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1490'. [ 143.214675][T10051] tls_set_device_offload: netdev not found [ 143.267978][T10053] kvm: user requested TSC rate below hardware speed [ 143.381319][ T50] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 143.562700][ T50] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.567805][ T50] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.572095][ T50] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.575183][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.798642][ T50] usb 9-1: GET_CAPABILITIES returned 0 [ 143.800425][ T50] usbtmc 9-1:16.0: can't read capabilities [ 144.001027][ T50] usb 9-1: USB disconnect, device number 2 [ 146.061739][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1542'. [ 146.517733][T10178] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 146.648846][T10178] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 146.767016][ T42] audit: type=1800 audit(1786197208.533:21): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1561" name="bulk_qlen" dev="configfs" ino=33553 res=0 errno=0 [ 146.850261][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1565'. [ 146.979859][T10210] input: syz0 as /devices/virtual/input/input10 [ 147.043166][ T42] audit: type=1800 audit(1786197208.813:22): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1573" name="bulk_qlen" dev="configfs" ino=31299 res=0 errno=0 [ 147.403616][ T5787] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.460804][ T42] audit: type=1800 audit(1786197209.223:23): pid=10238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1586" name="bulk_qlen" dev="configfs" ino=31340 res=0 errno=0 [ 147.549147][ T5787] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.558388][ T5093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.568931][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.577822][ T5093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.583435][ T5093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.586706][ T5093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.645620][ T5787] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.738480][ T5787] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.004641][ T5787] bridge_slave_1: left allmulticast mode [ 148.006465][ T5787] bridge_slave_1: left promiscuous mode [ 148.009112][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.017528][ T5787] bridge_slave_0: left allmulticast mode [ 148.019902][ T5787] bridge_slave_0: left promiscuous mode [ 148.024318][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.285901][ T5787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.298812][ T5787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.311225][ T5787] bond0 (unregistering): Released all slaves [ 148.366700][ T5446] 8021q: adding VLAN 0 to HW filter on device eth15 [ 148.563893][T10245] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.566177][T10245] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.568329][T10245] bridge_slave_0: entered allmulticast mode [ 148.571920][T10245] bridge_slave_0: entered promiscuous mode [ 148.576216][T10245] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.578776][T10245] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.582237][T10245] bridge_slave_1: entered allmulticast mode [ 148.585201][ T10] libceph: connect (1)[c::]:6789 error -101 [ 148.587256][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 148.588672][T10245] bridge_slave_1: entered promiscuous mode [ 148.626910][T10245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.650709][T10245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.664046][T10311] ceph: No mds server is up or the cluster is laggy [ 148.673207][T10245] team0: Port device team_slave_0 added [ 148.678498][T10245] team0: Port device team_slave_1 added [ 148.772218][T10245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.779425][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.787694][T10245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.797234][ T5446] 8021q: adding VLAN 0 to HW filter on device eth16 [ 148.806230][ T5787] hsr_slave_0: left promiscuous mode [ 148.817077][ T5787] hsr_slave_1: left promiscuous mode [ 148.822081][ T5787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.825037][ T5787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.832952][ T5787] veth1_macvtap: left promiscuous mode [ 148.834842][ T5787] veth0_macvtap: left promiscuous mode [ 148.836799][ T5787] veth1_vlan: left promiscuous mode [ 148.838523][ T5787] veth0_vlan: left promiscuous mode [ 149.012613][ T5787] team0 (unregistering): Port device team_slave_1 removed [ 149.028139][ T5787] team0 (unregistering): Port device team_slave_0 removed [ 149.119061][T10245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.124134][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.135751][T10245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.181052][T10245] hsr_slave_0: entered promiscuous mode [ 149.183850][T10245] hsr_slave_1: entered promiscuous mode [ 149.186279][T10245] debugfs: 'hsr0' already exists in 'hsr' [ 149.188540][T10245] Cannot create hsr debugfs directory [ 149.367303][ T5446] 8021q: adding VLAN 0 to HW filter on device eth17 [ 149.416799][T10245] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 149.422899][T10245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.427689][T10245] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 149.433022][T10245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.435773][T10245] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 149.439846][T10245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.442813][T10245] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 149.446632][T10245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.492011][T10245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.509329][T10245] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.522499][ T8262] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.525210][ T8262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.539562][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.542198][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.614560][ T5446] 8021q: adding VLAN 0 to HW filter on device eth18 [ 149.652461][ T5093] Bluetooth: hci3: command tx timeout [ 149.811819][T10245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.987399][T10245] veth0_vlan: entered promiscuous mode [ 149.992848][T10245] veth1_vlan: entered promiscuous mode [ 150.010558][T10245] veth0_macvtap: entered promiscuous mode [ 150.015172][T10245] veth1_macvtap: entered promiscuous mode [ 150.024692][T10245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.030560][T10245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.097194][ T8260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.099653][ T8260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.105960][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.110852][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.126158][ T8260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.128677][ T8260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.141278][ T5787] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.144634][ T5787] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.187847][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1621'. [ 150.245666][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1613'. [ 150.260552][T10383] bond3: entered promiscuous mode [ 150.262963][T10383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.288005][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 150.296819][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 150.360089][T10397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xef70 instead [ 150.369270][T10397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x118e instead [ 150.375091][T10397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe838 instead [ 150.380546][T10397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x70c7 instead [ 150.385723][T10397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x6a04 instead [ 150.390638][T10397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2396 instead [ 150.397528][T10397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xce27 instead [ 150.403933][T10397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8e39 instead [ 150.407202][T10397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xd445 instead [ 150.410428][T10397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1f6b instead [ 150.413956][T10397] jffs2: Further such events for this erase block will not be printed [ 150.417099][T10397] jffs2: notice: (10397) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 150.928039][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'. [ 150.934918][T10424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1632'. [ 151.107184][T10433] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 151.113788][T10433] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 151.364511][T10447] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.367256][T10447] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.486617][ T42] audit: type=1800 audit(1786197213.253:24): pid=10457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1645" name="is_nonrot" dev="configfs" ino=31572 res=0 errno=0 [ 151.501973][T10427] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 151.663576][T10427] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.667324][T10427] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.670644][T10427] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.676076][T10427] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.679939][T10427] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.689822][T10427] usb 10-1: config 0 descriptor?? [ 151.734293][ T5093] Bluetooth: hci3: command tx timeout [ 151.812258][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.817951][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 151.822948][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.826563][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 151.830240][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.834328][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 151.838036][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.841749][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 152.081295][ T42] audit: type=1800 audit(1786197213.843:25): pid=10484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1653" name="file1" dev="9p" ino=74743367 res=0 errno=0 [ 152.105193][T10427] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 152.117925][T10427] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 152.364229][T10427] usb 10-1: USB disconnect, device number 6 [ 152.447430][T10498] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 152.668515][T10427] libceph: connect (1)[c::]:6789 error -101 [ 152.670659][T10427] libceph: mon0 (1)[c::]:6789 connect error [ 152.765720][T10513] ceph: No mds server is up or the cluster is laggy [ 153.081158][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.084780][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 153.088388][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.092010][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 153.095561][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.099600][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 153.103256][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.106475][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 153.272565][T10534] ip6tnl2: entered allmulticast mode [ 153.519111][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 153.811443][ T5093] Bluetooth: hci3: command tx timeout [ 154.123625][T10598] bridge1: entered promiscuous mode [ 154.130784][T10598] bridge1: entered allmulticast mode [ 154.487206][T10621] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1708'. [ 154.661120][ T6458] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 154.822315][ T6458] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.826277][ T6458] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.830542][ T6458] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.834227][ T6458] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.047749][ T6458] usb 11-1: GET_CAPABILITIES returned 0 [ 155.049796][ T6458] usbtmc 11-1:16.0: can't read capabilities [ 155.063819][T10648] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.066703][T10648] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.134762][T10648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.146686][T10648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.252258][ T6458] usb 11-1: USB disconnect, device number 4 [ 155.281197][ T5787] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.285170][ T5787] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.288612][ T5787] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.292277][ T5787] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.891879][ T5093] Bluetooth: hci3: command tx timeout [ 156.022793][ T42] audit: type=1804 audit(1786197217.793:26): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1746" name="/newroot/337/file0" dev="tmpfs" ino=1785 res=1 errno=0 [ 156.263821][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 156.266250][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 156.268719][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 156.270790][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 156.357755][T10710] ceph: No mds server is up or the cluster is laggy [ 157.511087][ T850] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 157.527973][T10777] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.661176][ T850] usb 11-1: Using ep0 maxpacket: 8 [ 157.664367][ T850] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 157.667101][ T850] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.670163][ T850] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.673761][ T850] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.677018][ T850] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.681463][ T850] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.684352][ T850] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.898830][ T850] usb 11-1: usb_control_msg returned -32 [ 157.900951][ T850] usbtmc 11-1:16.0: can't read capabilities [ 158.868805][ T5818] usb 11-1: USB disconnect, device number 5 [ 159.421753][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1771'. [ 159.563781][T10798] bridge0: port 1(syz_tun) entered blocking state [ 159.566809][T10798] bridge0: port 1(syz_tun) entered disabled state [ 159.569792][T10798] syz_tun: entered allmulticast mode [ 159.576432][T10798] syz_tun: entered promiscuous mode [ 160.251032][T10864] gadgetfs: bound to dummy_udc driver [ 160.476818][ T10] libceph: connect (1)[c::]:6789 error -101 [ 160.484812][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 160.573035][T10875] ceph: No mds server is up or the cluster is laggy [ 160.836413][T10914] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1811'. [ 160.912519][T10922] syzkaller1: entered promiscuous mode [ 160.917618][T10922] syzkaller1: entered allmulticast mode [ 160.928877][T10922] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 161.166100][ T42] audit: type=1800 audit(1786197222.923:27): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1825" name="file1" dev="overlay" ino=1871 res=0 errno=0 [ 161.267366][T10948] syzkaller1: entered promiscuous mode [ 161.269231][T10948] syzkaller1: entered allmulticast mode [ 161.303577][ T8139] cgroup: fork rejected by pids controller in /syz6 [ 161.438767][T10958] input: syz0 as /devices/virtual/input/input12 [ 161.588505][T10964] netlink: 'syz.5.1836': attribute type 1 has an invalid length. [ 161.605421][T10964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.704575][ T5787] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.708064][ T5787] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 161.854431][ T5787] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.860076][ T5787] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 161.890095][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.902844][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.911564][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.916737][T10978] i2c i2c-1: new_device: Instantiated device isp1301 at 0x2c [ 161.922640][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.929516][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.974951][ T5787] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.978460][ T5787] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 162.139566][ T5787] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.145136][ T5787] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 162.333937][ T5787] bond1: left allmulticast mode [ 162.335720][ T5787] bond1: left promiscuous mode [ 162.337445][ T5787] bridge0: port 3(bond1) entered disabled state [ 162.341779][ T5787] bridge_slave_1: left allmulticast mode [ 162.343699][ T5787] bridge_slave_1: left promiscuous mode [ 162.345684][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.350914][ T5787] bridge_slave_0: left allmulticast mode [ 162.353450][ T5787] bridge_slave_0: left promiscuous mode [ 162.355377][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.514415][ T5787] bond2 (unregistering): (slave geneve2): Releasing active interface [ 162.533065][ T5787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.543441][ T5787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.549584][ T5787] bond0 (unregistering): Released all slaves [ 162.554839][ T5787] bond1 (unregistering): Released all slaves [ 162.567882][ T5787] bond2 (unregistering): Released all slaves [ 162.580552][ T5787] bond3 (unregistering): Released all slaves [ 162.993379][ T5787] hsr_slave_0: left promiscuous mode [ 162.997687][ T5787] hsr_slave_1: left promiscuous mode [ 163.006992][ T5787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.010530][ T5787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.015082][ T5787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.017616][ T5787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.030113][ T5787] veth1_macvtap: left promiscuous mode [ 163.032111][ T5787] veth0_macvtap: left promiscuous mode [ 163.034021][ T5787] veth1_vlan: left promiscuous mode [ 163.035801][ T5787] veth0_vlan: left promiscuous mode [ 163.176225][ T5787] team0 (unregistering): Port device team_slave_1 removed [ 163.191580][ T5787] team0 (unregistering): Port device team_slave_0 removed [ 163.301588][ T5446] 8021q: adding VLAN 0 to HW filter on device eth19 [ 163.327933][T10980] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.331249][T10980] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.334263][T10980] bridge_slave_0: entered allmulticast mode [ 163.338021][T10980] bridge_slave_0: entered promiscuous mode [ 163.348824][T10980] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.352071][T10980] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.356585][T10980] bridge_slave_1: entered allmulticast mode [ 163.360334][T10980] bridge_slave_1: entered promiscuous mode [ 163.387081][T10980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.393809][T10980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.430263][T10980] team0: Port device team_slave_0 added [ 163.435060][T10980] team0: Port device team_slave_1 added [ 163.457583][T10980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.460420][T10980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.471210][T10980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.477271][T10980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.480127][T10980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.490855][T10980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.549115][T10980] hsr_slave_0: entered promiscuous mode [ 163.551912][T10980] hsr_slave_1: entered promiscuous mode [ 163.554604][T10980] debugfs: 'hsr0' already exists in 'hsr' [ 163.556731][T10980] Cannot create hsr debugfs directory [ 163.692425][ T5446] 8021q: adding VLAN 0 to HW filter on device eth20 [ 163.971293][ T64] Bluetooth: hci0: command tx timeout [ 164.229784][T10980] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.235384][T10980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.238370][T10980] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.243252][T10980] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.249727][T10980] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.256420][T10980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.260447][T10980] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.267843][T10980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.312606][T10980] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.315715][T10980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.374446][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.411800][T10980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.430143][T10980] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.438087][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.440586][ T8268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.470360][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.473078][ T8268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.908879][T10980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.074875][T10980] veth0_vlan: entered promiscuous mode [ 165.080437][T10980] veth1_vlan: entered promiscuous mode [ 165.098801][T10980] veth0_macvtap: entered promiscuous mode [ 165.103737][T10980] veth1_macvtap: entered promiscuous mode [ 165.112803][T10980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.119434][T10980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.159110][ T5787] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.208121][ T7526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.210690][ T7526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.232179][ T8268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.234693][ T8268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.241587][ T5787] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.245327][ T5787] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.248953][ T5787] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.299237][T11075] netlink: 'syz.6.1837': attribute type 1 has an invalid length. [ 165.464845][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'. [ 165.527261][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1855'. [ 165.532166][T11090] netlink: 'syz.5.1855': attribute type 1 has an invalid length. [ 165.537522][T11090] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1855'. [ 165.610200][ T42] audit: type=1326 audit(1786197227.373:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 165.620039][ T42] audit: type=1326 audit(1786197227.373:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 165.629226][ T42] audit: type=1326 audit(1786197227.373:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 165.638435][ T42] audit: type=1326 audit(1786197227.373:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 165.646186][ T42] audit: type=1326 audit(1786197227.373:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf706efec code=0x7ffc0000 [ 165.656035][ T42] audit: type=1326 audit(1786197227.373:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 165.671145][ T42] audit: type=1326 audit(1786197227.373:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 165.689514][ T42] audit: type=1326 audit(1786197227.373:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 165.699665][ T42] audit: type=1326 audit(1786197227.373:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf706efec code=0x7ffc0000 [ 166.051245][ T64] Bluetooth: hci0: command tx timeout [ 166.171019][ T42] kauditd_printk_skb: 3265 callbacks suppressed [ 166.171040][ T42] audit: type=1326 audit(1786197227.933:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf706f017 code=0x7ffc0000 [ 166.180455][ T42] audit: type=1326 audit(1786197227.933:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf706efec code=0x7ffc0000 [ 166.187219][ T42] audit: type=1326 audit(1786197227.933:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf706f017 code=0x7ffc0000 [ 166.194809][ T42] audit: type=1326 audit(1786197227.933:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf706efec code=0x7ffc0000 [ 166.201517][ T42] audit: type=1326 audit(1786197227.933:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf706efec code=0x7ffc0000 [ 166.201543][ T42] audit: type=1326 audit(1786197227.933:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf706f017 code=0x7ffc0000 [ 166.201976][ T42] audit: type=1326 audit(1786197227.933:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf706f017 code=0x7ffc0000 [ 166.223346][ T42] audit: type=1326 audit(1786197227.933:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf706efec code=0x7ffc0000 [ 166.230785][ T42] audit: type=1326 audit(1786197227.933:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf706f017 code=0x7ffc0000 [ 166.241563][ T42] audit: type=1326 audit(1786197227.933:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.8.1857" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf706efec code=0x7ffc0000 [ 167.739084][T11155] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1882'. [ 167.813082][ T10] IPVS: starting estimator thread 0... [ 167.911438][T11165] IPVS: using max 27 ests per chain, 64800 per kthread [ 167.996778][T11177] kvm: user requested TSC rate below hardware speed [ 168.048539][T11183] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1895'. [ 168.071145][T11186] loop6: detected capacity change from 0 to 2640 [ 168.082853][ T5733] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.085908][ T5733] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.091611][ T5733] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.095005][T11186] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.097650][T11186] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.100135][T11186] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.103302][T11186] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.105862][T11186] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.108493][T11186] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.112748][T11186] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.115314][T11186] ldm_validate_partition_table(): Disk read failed. [ 168.117726][T11186] Dev loop6: unable to read RDB block 0 [ 168.119774][T11186] loop6: unable to read partition table [ 168.126650][T11186] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 168.132760][ T64] Bluetooth: hci0: command tx timeout [ 168.513335][T11217] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1906'. [ 168.717241][ T5733] udevd[5733]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 168.721749][ T6960] cgroup: fork rejected by pids controller in /syz4 [ 169.179692][ T5093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.190023][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.200927][ T5093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.208603][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.224714][ T5093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.246631][T11249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xef70 instead [ 169.252147][T11249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x118e instead [ 169.255418][T11249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe838 instead [ 169.258650][T11249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x70c7 instead [ 169.263090][T11249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x6a04 instead [ 169.266403][T11249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2396 instead [ 169.269577][T11249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xce27 instead [ 169.273119][T11249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8e39 instead [ 169.276553][T11249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xd445 instead [ 169.279783][T11249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1f6b instead [ 169.283408][T11249] jffs2: Further such events for this erase block will not be printed [ 169.286609][T11249] jffs2: notice: (11249) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 169.499844][T11266] netlink: 'syz.5.1921': attribute type 2 has an invalid length. [ 169.608694][ T12] bridge_slave_1: left allmulticast mode [ 169.612340][ T12] bridge_slave_1: left promiscuous mode [ 169.615555][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.626292][ T12] bridge_slave_0: left promiscuous mode [ 169.631573][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.852735][ T12] bond2 (unregistering): (slave geneve2): Releasing active interface [ 169.879219][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.897206][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.906014][ T12] bond0 (unregistering): Released all slaves [ 169.925683][ T12] bond1 (unregistering): (slave lo): Releasing backup interface [ 169.933863][ T12] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 169.940090][ T12] bond1 (unregistering): Released all slaves [ 169.957482][ T12] bond2 (unregistering): Released all slaves [ 170.211379][ T64] Bluetooth: hci0: command tx timeout [ 170.298359][ T5446] 8021q: adding VLAN 0 to HW filter on device eth19 [ 170.356851][T11242] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.376161][T11242] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.381654][T11242] bridge_slave_0: entered allmulticast mode [ 170.385776][T11242] bridge_slave_0: entered promiscuous mode [ 170.406627][T11242] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.409647][T11242] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.413704][T11242] bridge_slave_1: entered allmulticast mode [ 170.417701][T11242] bridge_slave_1: entered promiscuous mode [ 170.491926][T11242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.520434][T11242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.669075][T11242] team0: Port device team_slave_0 added [ 170.673511][T11242] team0: Port device team_slave_1 added [ 170.676105][ T5446] 8021q: adding VLAN 0 to HW filter on device eth20 [ 170.705516][ T12] hsr_slave_0: left promiscuous mode [ 170.710099][ T12] hsr_slave_1: left promiscuous mode [ 170.848341][ T12] team0 (unregistering): Port device team_slave_1 removed [ 170.860632][ T12] team0 (unregistering): Port device team_slave_0 removed [ 170.961877][T11242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.964815][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.973631][T11242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.980413][T11242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.982374][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.990188][T11242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.156362][T11242] hsr_slave_0: entered promiscuous mode [ 171.159132][T11242] hsr_slave_1: entered promiscuous mode [ 171.161833][T11242] debugfs: 'hsr0' already exists in 'hsr' [ 171.164145][T11242] Cannot create hsr debugfs directory [ 171.338809][ T5446] 8021q: adding VLAN 0 to HW filter on device eth21 [ 171.341466][ T64] Bluetooth: hci1: command tx timeout [ 171.746196][T11242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.755282][T11242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.759049][T11242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.767837][T11242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.771578][T11242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.777754][T11242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.800504][T11242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.808364][T11242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.878086][T11242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.889551][T11242] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.899755][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.902855][ T8116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.912661][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.915698][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.295572][T11242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.511676][T11242] veth0_vlan: entered promiscuous mode [ 172.522245][T11242] veth1_vlan: entered promiscuous mode [ 172.545658][T11242] veth0_macvtap: entered promiscuous mode [ 172.566464][T11242] veth1_macvtap: entered promiscuous mode [ 172.591730][T11242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.607263][T11242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.661514][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.703287][ T8260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.710483][ T8260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.726969][ T8260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.729862][ T8260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.741209][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.744784][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.748240][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.195780][T11367] Invalid argument reading file caps for ./file0 [ 173.277889][T11371] netlink: 'syz.4.1936': attribute type 12 has an invalid length. [ 173.411342][ T64] Bluetooth: hci1: command tx timeout [ 174.637400][T11421] device-mapper: ioctl: Unable to rename non-existent device, to uuid § [ 174.846600][ T8304] libceph: connect (1)[c::]:6789 error -101 [ 174.852041][ T8304] libceph: mon0 (1)[c::]:6789 connect error [ 174.858433][ T8304] libceph: connect (1)[c::]:6789 error -101 [ 174.861966][ T8304] libceph: mon0 (1)[c::]:6789 connect error [ 174.934810][T11427] ceph: No mds server is up or the cluster is laggy [ 174.998472][T11435] lo: entered promiscuous mode [ 175.000881][T11435] tunl0: entered promiscuous mode [ 175.003539][T11435] gre0: entered promiscuous mode [ 175.005286][T11435] gretap0: entered promiscuous mode [ 175.007078][T11435] erspan0: entered promiscuous mode [ 175.008859][T11435] ip_vti0: entered promiscuous mode [ 175.010697][T11435] ip6_vti0: entered promiscuous mode [ 175.013261][T11435] sit0: entered promiscuous mode [ 175.015065][T11435] ip6tnl0: entered promiscuous mode [ 175.016898][T11435] ip6gre0: entered promiscuous mode [ 175.018733][T11435] ip6gretap0: entered promiscuous mode [ 175.020568][T11435] bridge0: entered promiscuous mode [ 175.023088][T11435] vcan0: entered promiscuous mode [ 175.024925][T11435] bond0: entered promiscuous mode [ 175.026664][T11435] team0: entered promiscuous mode [ 175.028531][T11435] dummy0: entered promiscuous mode [ 175.030521][T11435] nlmon0: entered promiscuous mode [ 175.032596][T11435] batadv0: entered promiscuous mode [ 175.034331][T11435] vxcan0: entered promiscuous mode [ 175.036206][T11435] vxcan1: entered promiscuous mode [ 175.038372][T11435] veth0: entered promiscuous mode [ 175.040136][T11435] veth1: entered promiscuous mode [ 175.042598][T11435] wg0: entered promiscuous mode [ 175.044365][T11435] wg1: entered promiscuous mode [ 175.046470][T11435] wg2: entered promiscuous mode [ 175.048220][T11435] veth0_to_bridge: entered promiscuous mode [ 175.050239][T11435] bridge_slave_0: entered promiscuous mode [ 175.053382][T11435] veth1_to_bridge: entered promiscuous mode [ 175.055813][T11435] bridge_slave_1: entered promiscuous mode [ 175.057894][T11435] veth0_to_bond: entered promiscuous mode [ 175.060003][T11435] bond_slave_0: entered promiscuous mode [ 175.062491][T11435] veth1_to_bond: entered promiscuous mode [ 175.064618][T11435] bond_slave_1: entered promiscuous mode [ 175.066651][T11435] veth0_to_team: entered promiscuous mode [ 175.068750][T11435] team_slave_0: entered promiscuous mode [ 175.070856][T11435] veth1_to_team: entered promiscuous mode [ 175.073337][T11435] team_slave_1: entered promiscuous mode [ 175.075359][T11435] veth1_to_batadv: entered promiscuous mode [ 175.077417][T11435] batadv_slave_1: entered promiscuous mode [ 175.079429][T11435] xfrm0: entered promiscuous mode [ 175.081502][T11435] veth0_to_hsr: entered promiscuous mode [ 175.083940][T11435] veth1_to_hsr: entered promiscuous mode [ 175.086063][T11435] hsr0: entered promiscuous mode [ 175.087849][T11435] veth1_virt_wifi: entered promiscuous mode [ 175.089910][T11435] veth0_virt_wifi: entered promiscuous mode [ 175.092700][T11435] virt_wifi0: entered promiscuous mode [ 175.094842][T11435] vlan0: entered promiscuous mode [ 175.096752][T11435] vlan1: entered promiscuous mode [ 175.098543][T11435] macvlan0: entered promiscuous mode [ 175.100371][T11435] macvlan1: entered promiscuous mode [ 175.102737][T11435] ipvlan0: entered promiscuous mode [ 175.104613][T11435] ipvlan1: entered promiscuous mode [ 175.106588][T11435] macvtap0: entered promiscuous mode [ 175.108404][T11435] macsec0: entered promiscuous mode [ 175.110168][T11435] geneve0: entered promiscuous mode [ 175.113072][T11435] geneve1: entered promiscuous mode [ 175.114946][T11435] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 175.117397][T11435] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 175.119871][T11435] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 175.122745][T11435] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 175.125290][T11435] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 175.127688][T11435] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 175.130059][T11435] bond1: entered promiscuous mode [ 175.132670][T11435] mac80211_hwsim hwsim17 wlan2: entered promiscuous mode [ 175.135402][T11435] sit1: entered promiscuous mode [ 175.137173][T11435] ip6erspan0: entered promiscuous mode [ 175.151292][T11435] sit2: entered promiscuous mode [ 175.153258][T11435] ip6tnl1: entered promiscuous mode [ 175.155149][T11435] bond2: entered promiscuous mode [ 175.156822][T11435] geneve2: entered promiscuous mode [ 175.158768][T11435] gre1: entered promiscuous mode [ 175.160686][T11435] ip6tnl2: entered promiscuous mode [ 175.162521][T11435] ip6tnl2: left allmulticast mode [ 175.165096][T11435] bridge1: left allmulticast mode [ 175.168715][T11435] bond3: entered promiscuous mode [ 175.491715][ T64] Bluetooth: hci1: command tx timeout [ 175.536645][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1970'. [ 175.938855][T11485] lo: entered allmulticast mode [ 175.947830][T11484] lo: left allmulticast mode [ 176.240317][T10460] libceph: connect (1)[c::]:6789 error -101 [ 176.243201][T10460] libceph: mon0 (1)[c::]:6789 connect error [ 176.331966][T11498] ceph: No mds server is up or the cluster is laggy [ 177.340529][ T8593] libceph: connect (1)[c::]:6789 error -101 [ 177.342999][ T8593] libceph: mon0 (1)[c::]:6789 connect error [ 177.442424][T11531] ceph: No mds server is up or the cluster is laggy [ 177.571138][ T64] Bluetooth: hci1: command tx timeout [ 177.696779][T11549] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 177.830509][T11553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2004'. [ 178.002160][T11555] input: syz1 as /devices/virtual/input/input13 [ 178.277385][T11563] kvm: user requested TSC rate below hardware speed [ 178.281676][T11566] netdevsim0 speed is unknown, defaulting to 1000 [ 178.287799][T11566] netdevsim0 speed is unknown, defaulting to 1000 [ 178.293745][T11563] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 178.297618][T11566] netdevsim0 speed is unknown, defaulting to 1000 [ 178.306359][T11566] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 178.313675][T11566] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 178.325072][T11566] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 178.351122][T11566] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.373935][T11566] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.466184][T11566] netdevsim0 speed is unknown, defaulting to 1000 [ 178.472983][T11566] netdevsim0 speed is unknown, defaulting to 1000 [ 178.476178][T11566] netdevsim0 speed is unknown, defaulting to 1000 [ 178.479166][T11566] netdevsim0 speed is unknown, defaulting to 1000 [ 179.744005][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'. [ 179.804984][T11588] input: syz1 as /devices/virtual/input/input14 [ 179.819644][T11590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2020'. [ 179.829957][T11590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2020'. [ 180.201161][T10460] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 180.226764][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2028'. [ 180.372408][T10460] usb 10-1: Using ep0 maxpacket: 32 [ 180.415737][T10460] usb 10-1: unable to get BOS descriptor or descriptor too short [ 180.418763][T10460] usb 10-1: no configurations [ 180.422966][T10460] usb 10-1: can't read configurations, error -22 [ 180.767259][T11628] 9pnet_virtio: no channels available for device syz [ 181.109405][T11640] netdevsim0 speed is unknown, defaulting to 1000 [ 181.186726][T11644] netdevsim0 speed is unknown, defaulting to 1000 [ 181.603342][T11671] netlink: 'syz.4.2063': attribute type 2 has an invalid length. [ 181.609393][T11671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2063'. [ 181.663021][T11671] : entered promiscuous mode [ 181.944334][T11675] netdevsim0 speed is unknown, defaulting to 1000 [ 182.769139][T11712] netdevsim0 speed is unknown, defaulting to 1000 [ 183.291594][ T10] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 183.454953][ T10] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.469740][ T10] usb 13-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 183.474048][ T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.505425][ T10] as10x_usb: device has been detected [ 183.508530][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 183.540426][ T10] usb 13-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 183.583994][ T10] as10x_usb: error during firmware upload part1 [ 183.588027][ T10] Registered device Abilis Systems DVB-Titan [ 183.691545][T11733] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 183.942691][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2085'. [ 183.950716][T11745] vlan2: entered promiscuous mode [ 184.143818][ T42] kauditd_printk_skb: 10094 callbacks suppressed [ 184.143837][ T42] audit: type=1326 audit(1786197245.913:13406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.4.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 184.156311][ T42] audit: type=1326 audit(1786197245.913:13407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.4.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 184.168402][ T42] audit: type=1326 audit(1786197245.923:13408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.4.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 184.177350][ T42] audit: type=1326 audit(1786197245.923:13409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.4.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 184.184776][ T42] audit: type=1326 audit(1786197245.923:13410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.4.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 184.192358][ T42] audit: type=1326 audit(1786197245.923:13411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.4.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 184.200881][ T42] audit: type=1326 audit(1786197245.923:13412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.4.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 184.207932][ T42] audit: type=1326 audit(1786197245.923:13413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.4.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 184.214771][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2087'. [ 184.217761][ T42] audit: type=1326 audit(1786197245.923:13414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.4.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 184.224966][ T42] audit: type=1326 audit(1786197245.923:13415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11750 comm="syz.4.2088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 184.257839][T11758] 9p: Invalid gid '0x00000000ffffffff' [ 184.427240][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2093'. [ 185.024245][T11778] netdevsim0 speed is unknown, defaulting to 1000 [ 185.325522][ T5882] usb 13-1: USB disconnect, device number 2 [ 185.367253][ T5882] Unregistered device Abilis Systems DVB-Titan [ 185.370304][ T5882] as10x_usb: device has been disconnected [ 185.773582][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2105'. [ 186.099482][T11812] netdevsim0 speed is unknown, defaulting to 1000 [ 186.523753][T11828] netlink: 'syz.8.2117': attribute type 1 has an invalid length. [ 186.594022][T11828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.770223][T11839] netdevsim0 speed is unknown, defaulting to 1000 [ 187.494220][T11880] loop5: detected capacity change from 0 to 7 [ 187.502738][T11880] Dev loop5: unable to read RDB block 7 [ 187.505773][T11880] loop5: AHDI p1 p3 p4 [ 187.507605][T11880] loop5: partition table partially beyond EOD, truncated [ 187.511973][T11880] loop5: p1 size 100663296 extends beyond EOD, truncated [ 187.522458][T11880] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 187.675736][T11890] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 187.694997][T11880] Dev loop5: unable to read RDB block 7 [ 187.696728][T11880] loop5: AHDI p1 p3 p4 [ 187.698374][T11880] loop5: partition table partially beyond EOD, truncated [ 187.701364][T11880] loop5: p1 size 100663296 extends beyond EOD, truncated [ 187.722224][T11880] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 187.787577][ T5885] udevd[5885]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 187.790319][ T5733] udevd[5733]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 187.807802][ T5885] udevd[5885]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 187.814199][ T5733] udevd[5733]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 187.952172][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 187.960109][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 188.068953][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2152'. [ 188.074674][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2152'. [ 188.084882][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2152'. [ 188.386605][T11930] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 189.462798][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2166'. [ 189.863784][ T42] kauditd_printk_skb: 17027 callbacks suppressed [ 189.863803][ T42] audit: type=1326 audit(1786197251.633:30443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11962 comm="syz.5.2174" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 190.399823][T11979] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 190.691885][T10460] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 190.862031][T10460] usb 13-1: Using ep0 maxpacket: 16 [ 190.865377][T10460] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.869058][T10460] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 190.873655][T10460] usb 13-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 190.877681][T10460] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.883408][T10460] usb 13-1: config 0 descriptor?? [ 191.147322][T12008] KVM: debugfs: duplicate directory 12008-5 [ 191.299659][T10460] HID 045e:07da: Invalid code 65791 type 1 [ 191.311584][T10460] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:045E:07DA.0008/input/input15 [ 191.337405][T10460] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 191.440833][T12029] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 192.100866][T10460] usb 13-1: USB disconnect, device number 3 [ 192.329791][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802af84000: rx timeout, send abort [ 192.673336][T12068] loop5: detected capacity change from 0 to 7 [ 192.682007][T12068] Dev loop5: unable to read RDB block 7 [ 192.683876][T12068] loop5: AHDI p1 p3 p4 [ 192.685525][T12068] loop5: partition table partially beyond EOD, truncated [ 192.688131][T12068] loop5: p1 size 100663296 extends beyond EOD, truncated [ 192.691681][T12068] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 192.763651][T12068] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-16) [ 192.829709][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888014205400: rx timeout, send abort [ 192.835761][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802af84000: abort rx timeout. Force session deactivation [ 192.862464][ T5885] udevd[5885]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 192.867135][ T5733] udevd[5733]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 192.971716][T12077] netdevsim0 speed is unknown, defaulting to 1000 [ 193.335674][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888014205400: abort rx timeout. Force session deactivation [ 193.391693][T12091] xfrm1: entered allmulticast mode [ 193.402486][T12091] ip6gretap1: entered promiscuous mode [ 193.817334][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.820206][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.738105][T12228] Invalid argument reading file caps for ./file0 [ 197.988981][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 198.006388][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 198.013409][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 198.018348][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 198.039699][T12247] netlink: 'syz.5.2283': attribute type 1 has an invalid length. [ 198.054483][T12250] netlink: 'syz.4.2286': attribute type 1 has an invalid length. [ 198.079479][T12247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.111469][T12250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.141640][T12247] bond4: entered allmulticast mode [ 198.172704][T12253] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 198.204257][T12258] netdevsim0 speed is unknown, defaulting to 1000 [ 198.204277][ T5787] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 198.352407][ T5787] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 198.951172][T10461] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 199.102210][T10461] usb 9-1: not running at top speed; connect to a high speed hub [ 199.106481][T10461] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 199.112957][T10461] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 199.116663][T10461] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.119863][T10461] usb 9-1: Product: syz [ 199.121764][T10461] usb 9-1: Manufacturer: syz [ 199.123633][T10461] usb 9-1: SerialNumber: syz [ 199.141724][T10461] oti6858 9-1:1.0: oti6858 converter detected [ 199.148788][T10461] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 199.306157][ T42] audit: type=1326 audit(1786197264.078:30444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12278 comm="syz.6.2294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7fc00000 [ 199.704187][ T10] usb 9-1: USB disconnect, device number 3 [ 199.723785][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 199.729852][ T10] oti6858 9-1:1.0: device disconnected [ 200.304092][ T10] BUG: unable to handle page fault for address: 000000000001c0b4 [ 200.306768][ T10] #PF: supervisor read access in kernel mode SYZFAIL: failed to recv rpc [ 200.308797][ T10] #PF: error_code(0x0000) - not-present page [ 200.312078][ T10] PGD 138c6067 P4D 138c6067 PUD 2900a067 PMD 0 [ 200.314455][ T10] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 200.316211][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 200.319910][ T10] Tainted: [L]=SOFTLOCKUP [ 200.321466][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.324506][ T10] Workqueue: events azx_probe_work [ 200.326137][ T10] RIP: 0010:snd_hdac_bus_parse_capabilities+0x42/0x6d0 [ 200.328261][ T10] Code: 99 f8 48 8d 45 20 48 89 c2 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f8 05 00 00 48 8b 45 20 <66> 44 8b 68 14 4c 8b 7c 24 10 48 89 e8 45 0f b7 ed 45 31 f6 48 ba [ 200.334076][ T10] RSP: 0018:ffffc900001c7ab0 EFLAGS: 00010246 [ 200.335927][ T10] RAX: 000000000001c0a0 RBX: ffff8880287d0058 RCX: ffffffff897bf216 [ 200.338340][ T10] RDX: 1ffff110050fa00b RSI: ffffffff897035da RDI: ffff8880287d0038 [ 200.340802][ T10] RBP: ffff8880287d0038 R08: 0000000000000005 R09: 0000000000000003 [ 200.343224][ T10] R10: 0000000000000003 R11: 000000000000756b R12: 0000000000000003 [ 200.345605][ T10] R13: ffff88801c712a04 R14: ffff888021826000 R15: 0000000000000000 [ 200.347910][ T10] FS: 0000000000000000(0000) GS:ffff888096bf3000(0000) knlGS:0000000000000000 [ 200.350695][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.352722][ T10] CR2: 000000000001c0b4 CR3: 000000002a6b6000 CR4: 0000000000352ef0 [ 200.355082][ T10] Call Trace: [ 200.356093][ T10] [ 200.356986][ T10] azx_probe_work+0x1d8e/0x2640 [ 200.358535][ T10] ? __pfx_azx_probe_work+0x10/0x10 [ 200.360254][ T10] ? rcu_is_watching+0x12/0xc0 [ 200.361770][ T10] process_one_work+0xa23/0x1940 [ 200.363344][ T10] ? __pfx_process_one_work+0x10/0x10 [ 200.365036][ T10] ? __pfx_azx_probe_work+0x10/0x10 [ 200.366702][ T10] worker_thread+0x5ef/0xe50 [ 200.368176][ T10] ? __pfx_worker_thread+0x10/0x10 [ 200.369793][ T10] ? kthread+0x13a/0x450 [ 200.371230][ T10] ? __pfx_worker_thread+0x10/0x10 [ 200.373121][ T10] kthread+0x370/0x450 [ 200.374411][ T10] ? __pfx_kthread+0x10/0x10 [ 200.375880][ T10] ret_from_fork+0x72b/0xd50 [ 200.377315][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 200.378887][ T10] ? __switch_to+0x800/0x10f0 [ 200.380391][ T10] ? __pfx_kthread+0x10/0x10 [ 200.381912][ T10] ret_from_fork_asm+0x1a/0x30 [ 200.383435][ T10] [ 200.384435][ T10] Modules linked in: [ 200.385714][ T10] CR2: 000000000001c0b4 [ 200.387023][ T10] ---[ end trace 0000000000000000 ]--- [ 200.388737][ T10] RIP: 0010:snd_hdac_bus_parse_capabilities+0x42/0x6d0 [ 200.390887][ T10] Code: 99 f8 48 8d 45 20 48 89 c2 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f8 05 00 00 48 8b 45 20 <66> 44 8b 68 14 4c 8b 7c 24 10 48 89 e8 45 0f b7 ed 45 31 f6 48 ba [ 200.396923][ T10] RSP: 0018:ffffc900001c7ab0 EFLAGS: 00010246 [ 200.398825][ T10] RAX: 000000000001c0a0 RBX: ffff8880287d0058 RCX: ffffffff897bf216 [ 200.401341][ T10] RDX: 1ffff110050fa00b RSI: ffffffff897035da RDI: ffff8880287d0038 [ 200.404151][ T10] RBP: ffff8880287d0038 R08: 0000000000000005 R09: 0000000000000003 [ 200.406651][ T10] R10: 0000000000000003 R11: 000000000000756b R12: 0000000000000003 [ 200.409104][ T10] R13: ffff88801c712a04 R14: ffff888021826000 R15: 0000000000000000 [ 200.411639][ T10] FS: 0000000000000000(0000) GS:ffff888096bf3000(0000) knlGS:0000000000000000 [ 200.414652][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.416634][ T10] CR2: 000000000001c0b4 CR3: 000000002a6b6000 CR4: 0000000000352ef0 [ 200.419492][ T10] Kernel panic - not syncing: Fatal exception [ 200.422384][ T10] Kernel Offset: disabled [ 200.423806][ T10] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:54:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0ddf5 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc900001c7340 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b6e31f3 R15=ffffffff85a0dd90 RIP=ffffffff85a0de1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000001c0b4 CR3=000000002a6b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=f6d92cd0 EBX=f6da0c18 ECX=857cf373 EDX=857cf6d2 ESI=00000000 EDI=ffffffff EBP=ffffffff ESP=ffabd060 EIP=f709b375 EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 58266480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003370bff8 CR3=000000002a6b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90007340000 RBX=ffff888020e44000 RCX=ffffffff86f3815e RDX=00000000ffffffff RSI=ffffffff86f3816b RDI=ffff88801cb30000 RBP=0000000000000000 RSP=ffffc90000538ec0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffffc90000538ff8 R12=0000000000000000 R13=ffff888020e45808 R14=ffff888020e45420 R15=0000000000000000 RIP=ffffffff86f38198 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096df3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd639a6c5e3 CR3=000000004c81d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff8880137fca80 RCX=0000000000000001 RDX=ffff8880137fca80 RSI=ffffffff81c81953 RDI=ffff8880137fca80 RBP=ffffc900048ff790 RSP=ffffc900048ffdc0 R8 =0000000000000000 R9 =fffffbfff224371a R10=0000000000000000 R11=0000000000000001 R12=ffffc900048ffe28 R13=dffffc0000000000 R14=ffffc900048ffe28 R15=ffffc900048ff790 RIP=ffffffff865784b4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032d0fff8 CR3=000000002a558000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000