last executing test programs: 3m31.350046251s ago: executing program 1 (id=4604): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0xffffffff, 0x0, 'queue1\x00', 0x2}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x17, @time={0xbf, 0x316575}}) 3m31.243056323s ago: executing program 1 (id=4605): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m31.242885395s ago: executing program 1 (id=4606): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m31.033827924s ago: executing program 1 (id=4608): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x1df200, 0x4) 3m30.916061632s ago: executing program 1 (id=4612): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3m30.742570865s ago: executing program 1 (id=4618): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x890) 3m15.590893558s ago: executing program 32 (id=4618): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x890) 1m3.546464117s ago: executing program 2 (id=6256): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1m3.471821562s ago: executing program 2 (id=6258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000001c0)) 1m3.289217097s ago: executing program 2 (id=6259): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001200)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x3}}]}, 0x60}}, 0x0) 1m3.282336322s ago: executing program 2 (id=6262): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m3.188801523s ago: executing program 2 (id=6263): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 1m2.968233376s ago: executing program 2 (id=6267): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 1m2.903003538s ago: executing program 33 (id=6267): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 4.747523115s ago: executing program 0 (id=6917): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000000c0)=""/169, 0x10a) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x28, 0x77, 0xfb, 0x10, 0x1286, 0x2001, 0x9d84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x15, 0x80, 0x61, "", [{{0x9, 0x4, 0x4c, 0x58, 0x0, 0x1b, 0xc1, 0xda, 0x7}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x7e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7e03"]}]}) 2.090466031s ago: executing program 3 (id=6941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000013c0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4000) 2.01694505s ago: executing program 3 (id=6943): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2.015697462s ago: executing program 5 (id=6944): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 1.930401952s ago: executing program 5 (id=6946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x9}]}) 1.908390002s ago: executing program 0 (id=6947): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.843308646s ago: executing program 5 (id=6948): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x120) 1.772108331s ago: executing program 0 (id=6949): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) 1.155834154s ago: executing program 3 (id=6950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x3, 0x3, 0x6364, 0x6, 0xffffffff, 0x3}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1.100534127s ago: executing program 3 (id=6952): sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 918.351597ms ago: executing program 5 (id=6954): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0x0, 0x0, 0xee01) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x0, &(0x7f0000000480)) 917.951021ms ago: executing program 3 (id=6955): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x801, 0x4) connect$can_j1939(r0, &(0x7f0000000400)={0x1d, r1, 0x0, {0x1, 0xff, 0x1}, 0xff}, 0x18) 813.613012ms ago: executing program 3 (id=6957): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000640)={0x3, 0x100, 0xfffffffc, 0x9, 0xffffffff, 0x0, 0x1000002, 0x8, 0x0, 0x3, 0x21f, 0x1, 0x9, 0x2}) 803.118575ms ago: executing program 5 (id=6958): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) 788.732415ms ago: executing program 0 (id=6959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x7, 0x8, 0xa, 0x0, 0x1, 0xfffffffd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 648.536804ms ago: executing program 0 (id=6962): setresuid(0x0, 0xffffffffffffffff, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) 578.364536ms ago: executing program 0 (id=6963): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000200)="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", 0x2000, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 488.730816ms ago: executing program 4 (id=6965): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000280)="33032000ffff140000007ef52f555f2a0c0900000000000000f786dd3bfafffffffffffffff47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) 320.518368ms ago: executing program 4 (id=6966): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x801, 0x4) connect$can_j1939(r0, &(0x7f0000000400)={0x1d, r1, 0x0, {0x1, 0xff, 0x1}, 0xff}, 0x18) 257.767268ms ago: executing program 4 (id=6967): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 239.680843ms ago: executing program 5 (id=6968): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) 170.477659ms ago: executing program 4 (id=6969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 118.942931ms ago: executing program 4 (id=6970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 0s ago: executing program 4 (id=6971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000012300)={0x0, 0x12c, @ioapic={0x70000, 0xc8f, 0xfffff5ab, 0x7fffffff, 0x0, [{0x8, 0x81, 0xfd, '\x00', 0x7}, {0x0, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0xa, '\x00', 0x2}, {0xd, 0x1, 0xe9, '\x00', 0x3}, {0xff, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x1, '\x00', 0x6f}, {0x45, 0x51, 0x3}, {0x10, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x9a, '\x00', 0x4b}, {0x5, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x7}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0x3, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x6}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0x87, 0x21, 0x7, '\x00', 0x7}, {0x1, 0x9, 0x0, '\x00', 0x6}]}}) kernel console output (not intermixed with test programs): T10003] bridge_slave_1: left promiscuous mode [ 309.673353][T10003] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.688267][T10003] bridge_slave_0: left allmulticast mode [ 309.690726][T10003] bridge_slave_0: left promiscuous mode [ 309.693608][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.950460][T10003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.955435][T10003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.959169][T10003] bond0 (unregistering): Released all slaves [ 310.201575][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 310.202130][T17462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.207113][T17462] IPv6: NLM_F_CREATE should be set when creating new route [ 310.209426][T17462] IPv6: NLM_F_CREATE should be set when creating new route [ 310.229624][T17462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.518166][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 310.629248][T10003] hsr_slave_0: left promiscuous mode [ 310.634450][T10003] hsr_slave_1: left promiscuous mode [ 310.641622][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.651300][T10003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.661866][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.667656][T10003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.691689][T10003] veth1_macvtap: left promiscuous mode [ 310.695339][T10003] veth0_macvtap: left promiscuous mode [ 310.700163][T10003] veth1_vlan: left promiscuous mode [ 310.703877][T10003] veth0_vlan: left promiscuous mode [ 310.739366][T17508] loop5: detected capacity change from 0 to 7 [ 310.954268][T17508] Dev loop5: unable to read RDB block 7 [ 310.956018][T17508] loop5: unable to read partition table [ 310.965627][T17508] loop5: partition table beyond EOD, truncated [ 310.971099][T17508] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 310.975088][T17511] Invalid logical block size (-1) [ 311.032634][T10003] team0 (unregistering): Port device team_slave_1 removed [ 311.066341][T10003] team0 (unregistering): Port device team_slave_0 removed [ 311.101151][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5162'. [ 311.104950][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5162'. [ 311.235787][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 311.296330][ T10] kernel write not supported for file /input/event2 (pid: 10 comm: kworker/0:1) [ 311.310915][T17429] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.313048][T17429] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.315665][T17429] bridge_slave_0: entered allmulticast mode [ 311.320114][T17429] bridge_slave_0: entered promiscuous mode [ 311.328391][T17429] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.332579][T17429] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.335351][T17429] bridge_slave_1: entered allmulticast mode [ 311.340316][T17429] bridge_slave_1: entered promiscuous mode [ 311.401829][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5168'. [ 311.414378][T17429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.416917][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5168'. [ 311.419844][T17429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.421104][T17550] netlink: 'syz.2.5168': attribute type 20 has an invalid length. [ 311.486903][T17429] team0: Port device team_slave_0 added [ 311.504092][T17429] team0: Port device team_slave_1 added [ 311.546848][T17555] can0: slcan on ttyS3. [ 311.603424][ T5101] Bluetooth: hci1: command tx timeout [ 311.622748][T17429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.631878][T17429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.642381][T17429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.647954][T17429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.650273][T17429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.659292][T17429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.715037][T17555] can0 (unregistered): slcan off ttyS3. [ 311.716283][T17429] hsr_slave_0: entered promiscuous mode [ 311.719818][T17429] hsr_slave_1: entered promiscuous mode [ 311.723259][T17429] debugfs: 'hsr0' already exists in 'hsr' [ 311.726113][T17429] Cannot create hsr debugfs directory [ 311.750069][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5 [ 311.797404][T17566] netlink: 'syz.2.5174': attribute type 16 has an invalid length. [ 311.799962][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5175'. [ 312.258393][ T8675] kernel read not supported for file /rfkill (pid: 8675 comm: kworker/2:6) [ 312.332228][T17619] ip6tnl0: entered allmulticast mode [ 312.633540][T17429] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.641438][T17429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.648406][T17429] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.661837][T17429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.664807][T17429] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.671095][T17429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 312.675636][T17429] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.681296][T17429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 312.750423][T17429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.765109][T17429] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.774633][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.777178][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.787353][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.789654][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.055395][ T10] kernel write not supported for file /uinput (pid: 10 comm: kworker/0:1) [ 313.105921][T17429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.317788][T17429] veth0_vlan: entered promiscuous mode [ 313.329871][T17429] veth1_vlan: entered promiscuous mode [ 313.358114][T17429] veth0_macvtap: entered promiscuous mode [ 313.366148][T17429] veth1_macvtap: entered promiscuous mode [ 313.381819][T17429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.394794][T17429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.405726][ T6405] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.408630][ T6405] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.412067][ T6405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.416455][ T6405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.528434][ T6405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.531139][ T6405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.550572][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.553904][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.695125][ T5101] Bluetooth: hci1: command tx timeout [ 313.900072][T17716] veth0: entered promiscuous mode [ 313.903635][T17715] veth0: left promiscuous mode [ 314.169071][T17737] bad cache= option: noner_mlock 0 [ 314.169071][T17737] nr_zspages 439 [ 314.169071][T17737] nr_free_cma 0 [ 314.169071][T17737] numa_hit 179816 [ 314.169071][T17737] numa_miss 2959409 [ 314.169071][T17737] numa_foreign 2959409 [ 314.169071][T17737] numa_interleave 6288 [ 314.169071][T17737] numa_local 174977 [ 314.169071][T17737] numa_other 2964248 [ 314.169071][T17737] nr_inactive_anon 7613 [ 314.169071][T17737] nr_active_anon 380 [ 314.169071][T17737] nr_inactive_file 1542 [ 314.169071][T17737] nr_active_file 10190 [ 314.169071][T17737] nr_unevictable 1768 [ 314.169071][T17737] nr_slab_reclaimable 7487 [ 314.169071][T17737] nr_slab_unreclaimable 63854 [ 314.169071][T17737] nr_isolated_anon 0 [ 314.169071][T17737] nr_isolated_file 0 [ 314.169071][T17737] workingset_nodes 27 [ 314.169071][T17737] workingset_refault_anon 141 [ 314.169071][T17737] workingset_refault_file 886 [ 314.169071][T17737] workingset_activate_anon 81 [ 314.169071][T17737] workingset_activate_file 522 [ 314.169071][T17737] workingset_restore_anon 13 [ 314.169071][T17737] workingset_restore_file 77 [ 314.169071][T17737] workingset_nodereclaim 69 [ 314.169071][T17737] nr_anon_pages 7532 [ 314.169071][T17737] nr_mapped 22745 [ 314.169071][T17737] nr_file_pages 14109 [ 314.169071][T17737] nr_dirty 214 [ 314.169071][T17737] nr_writeback 0 [ 314.169071][T17737] nr_shmem 2251 [ 314.169071][T17737] nr_shmem_hugepages 0 [ 314.169071][T17737] nr_shmem_pmdmapped 0 [ 314.169071][T17737] nr_file_hugepages 0 [ 314.169071][T17737] nr_file_pmdmapped 0 [ 314.169071][T17737] nr_anon_transparent_hugepages 0 [ 314.169071][T17737] nr_vmscan_write 25305 [ 314.169071][T17737] nr_vmscan_immediate_reclaim 0 [ 314.169071][T17737] nr_dirtied 22188 [ 314.169071][T17737] nr_written 21974 [ 314.169071][T17737] nr_throttled_written 0 [ 314.169071][T17737] nr_kernel_misc_reclaimable 0 [ 314.169071][T17737] nr_foll_pin_acquired 9742 [ 314.169071][T17737] nr_foll_pin_released 9742 [ 314.169548][T17737] CIFS: VFS: bad cache= option: noner_mlock 0 [ 314.169548][T17737] nr_zspages 439 [ 314.169548][T17737] nr_free_cma 0 [ 314.169548][T17737] numa_hit 179816 [ 314.169548][T17737] numa_miss 2959409 [ 314.169548][T17737] numa_foreign 2959409 [ 314.169548][T17737] numa_interleave 6288 [ 314.169548][T17737] numa_local 174977 [ 314.169548][T17737] numa_other 2964248 [ 314.169548][T17737] nr_inactive_anon 7613 [ 314.169548][T17737] nr_active_anon 380 [ 314.169548][T17737] nr_inactive_file 1542 [ 314.169548][T17737] nr_active_file 10190 [ 314.169548][T17737] nr_unevictable 1768 [ 314.169548][T17737] nr_slab_reclaimable 7487 [ 314.169548][T17737] nr_slab_unreclaimable 63854 [ 314.169548][T17737] nr_isolated_anon 0 [ 314.169548][T17737] nr_isolated_file 0 [ 314.169548][T17737] workingset_nodes 27 [ 314.169548][T17737] workingset_refault_anon 141 [ 314.169548][T17737] workingset_refault_file 886 [ 314.169548][T17737] workingset_activate_anon 81 [ 314.169548][T17737] workingset_activate_file 522 [ 314.169548][T17737] workingset_restore_anon 13 [ 314.169548][T17737] workingset_restore_file 77 [ 314.169548][T17737] workingset_nodereclaim 69 [ 314.169548][T17737] nr_anon_pages 7532 [ 314.169548][T17737] nr_mapped 22745 [ 314.169548][T17737] nr_file_pages 14109 [ 314.169548][T17737] nr_dirty 214 [ 314.169548][T17737] nr_writeback 0 [ 314.169548][T17737] nr_shmem 2251 [ 314.169548][T17737] nr_shmem_hugepages 0 [ 314.169548][T17737] nr_shmem_pmdmapped 0 [ 314.169548][T17737] nr_file_hugepages 0 [ 314.169548][T17737] nr_file_pmdmapped 0 [ 314.169548][T17737] nr_anon_transparent_hugepages 0 [ 314.169548][T17737] nr_vmscan_write 25305 [ 314.169548][T17737] nr_vmscan_immediate_reclaim 0 [ 314.169548][T17737] nr_dirtied 22188 [ 314.169548][T17737] nr_written 21974 [ 314.169548][T17737] nr_throttled_written 0 [ 314.169548][T17737] nr_kernel_misc_reclaimable 0 [ 314.169548][T17737] nr_foll_pin_acquired 9742 [ 314.169548][T17737] nr_foll_pin_released 9742 [ 314.196429][T17739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5230'. [ 314.437994][T17748] kvm: user requested TSC rate below hardware speed [ 314.971120][T17767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5241'. [ 314.977444][T17767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5241'. [ 315.060907][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5243'. [ 315.740700][T17809] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 315.765340][ T5101] Bluetooth: hci1: command tx timeout [ 315.963692][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 316.001794][T17826] syzkaller1: tun_chr_ioctl cmd 35108 [ 316.011007][T17828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5268'. [ 316.123365][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 316.127780][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 316.132364][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.137443][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 316.143115][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 316.147260][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.147450][T17834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5272'. [ 316.152530][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 316.161506][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.224880][T17839] binder: BINDER_SET_CONTEXT_MGR already set [ 316.229756][T17839] binder: 17838:17839 ioctl 4018620d 80004a80 returned -16 [ 316.276581][ T8675] kernel write not supported for file bpf-map (pid: 8675 comm: kworker/2:6) [ 316.374756][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 316.377023][ T9] usbtmc 5-1:16.0: can't read capabilities [ 316.518931][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5284'. [ 316.521826][T17861] block nbd4: Unsupported socket: should be TCP or UNIX. [ 316.551393][T17863] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 316.555748][T17863] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 316.584812][ T8675] usb 5-1: USB disconnect, device number 29 [ 316.751096][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5293'. [ 316.755432][T17877] wg1: Caught tx_queue_len zero misconfig [ 316.916626][T17886] dummy0: entered allmulticast mode [ 316.920830][T17885] dummy0: left allmulticast mode [ 316.999570][T17891] openvswitch: netlink: IPv4 tun info is not correct [ 317.008544][T17893] overlayfs: missing 'workdir' [ 317.161487][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5304'. [ 317.485121][T17934] input: syz1 as /devices/virtual/input/input42 [ 317.642121][T17952] tipc: Started in network mode [ 317.645354][T17952] tipc: Node identity ac14140f, cluster identity 4711 [ 317.647827][T17952] tipc: New replicast peer: 255.255.255.255 [ 317.651752][T17952] tipc: Enabled bearer , priority 5 [ 317.843621][ T5101] Bluetooth: hci1: command tx timeout [ 318.130344][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5343'. [ 318.346809][T18000] ref_ctr_offset mismatch. inode: 0x1866 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 318.663141][ T8676] tipc: Node number set to 2886997007 [ 319.068576][T18029] batadv_slave_0: Caught tx_queue_len zero misconfig [ 319.205568][ T35] block nbd1: Possible stuck request ffff88802813e000: control (read@0,1024B). Runtime 180 seconds [ 319.209421][ T35] block nbd1: Possible stuck request ffff88802813e1c0: control (read@1024,1024B). Runtime 180 seconds [ 319.213422][ T35] block nbd1: Possible stuck request ffff88802813e380: control (read@2048,1024B). Runtime 180 seconds [ 319.216966][ T35] block nbd1: Possible stuck request ffff88802813e540: control (read@3072,1024B). Runtime 180 seconds [ 319.473271][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 319.623270][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 319.626390][ T10] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 319.629027][ T10] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 319.632433][ T10] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 319.636738][ T10] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 319.640843][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 319.644773][ T10] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 319.647821][ T10] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 319.650526][ T10] usb 9-1: Product: syz [ 319.652284][ T10] usb 9-1: Manufacturer: syz [ 319.654623][ T10] usb 9-1: SerialNumber: syz [ 319.660688][ T10] usb 9-1: config 0 descriptor?? [ 319.664782][ T10] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 319.669876][ T10] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 319.683024][T18063] __nla_validate_parse: 1 callbacks suppressed [ 319.683035][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5378'. [ 319.941380][ T8675] usb 9-1: USB disconnect, device number 4 [ 319.943472][ C0] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 319.948352][T18036] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 319.954871][ T8675] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 319.964374][T18080] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 320.011630][ T8676] kernel read not supported for file /dsp (pid: 8676 comm: kworker/3:5) [ 320.267846][T18100] bpf: Bad value for 'uid' [ 320.533878][T18113] nbd4: detected capacity change from 0 to 64 [ 320.541385][ T5101] block nbd4: Receive control failed (result -104) [ 320.991121][T10003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.110949][T10003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.155340][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.158629][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.164192][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.175943][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.180390][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.248794][T10003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.323415][T10003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.453615][ T8675] kernel read not supported for file /dsp1 (pid: 8675 comm: kworker/2:6) [ 321.515827][T10003] bridge_slave_1: left allmulticast mode [ 321.518135][T10003] bridge_slave_1: left promiscuous mode [ 321.523487][T10003] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.537782][T10003] bridge_slave_0: left allmulticast mode [ 321.540515][T10003] bridge_slave_0: left promiscuous mode [ 321.543765][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.750282][T18168] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5417'. [ 321.774827][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.776915][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.810138][T10003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.819995][T10003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.827790][T10003] bond0 (unregistering): Released all slaves [ 321.940353][T10003] tipc: Disabling bearer [ 321.942342][T10003] tipc: Left network mode [ 321.958609][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5421'. [ 322.049858][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 322.165553][T18205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.248982][T18144] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.252088][T18144] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.259870][T18144] bridge_slave_0: entered allmulticast mode [ 322.264398][T18144] bridge_slave_0: entered promiscuous mode [ 322.277141][T18144] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.282098][T18144] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.284936][T18144] bridge_slave_1: entered allmulticast mode [ 322.297332][T18144] bridge_slave_1: entered promiscuous mode [ 322.345160][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 322.363423][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5431'. [ 322.382584][T18144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.417530][T18144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.500375][T10003] hsr_slave_0: left promiscuous mode [ 322.506794][T10003] hsr_slave_1: left promiscuous mode [ 322.509697][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.512691][T10003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.519386][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.522672][T10003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.561017][T10003] veth1_macvtap: left promiscuous mode [ 322.567702][T10003] veth0_macvtap: left promiscuous mode [ 322.570603][T10003] veth1_vlan: left promiscuous mode [ 322.573476][T10003] veth0_vlan: left promiscuous mode [ 322.824017][T10003] team0 (unregistering): Port device team_slave_1 removed [ 322.834426][T10003] team0 (unregistering): Port device team_slave_0 removed [ 323.125222][T18144] team0: Port device team_slave_0 added [ 323.130032][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 323.283166][ T5748] Bluetooth: hci1: command tx timeout [ 323.731118][T18144] team0: Port device team_slave_1 added [ 323.804647][T18144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.806915][T18144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.816471][T18144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.821690][T18144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.824670][T18144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.834539][T18144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.852078][T18250] netlink: 'syz.0.5444': attribute type 1 has an invalid length. [ 323.854868][T18250] openvswitch: netlink: Missing valid actions attribute. [ 323.857959][T18250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.885655][T18144] hsr_slave_0: entered promiscuous mode [ 323.890277][T18144] hsr_slave_1: entered promiscuous mode [ 323.892788][T18144] debugfs: 'hsr0' already exists in 'hsr' [ 323.899047][T18144] Cannot create hsr debugfs directory [ 323.994591][T18265] pimreg: tun_chr_ioctl cmd 1074025678 [ 323.996464][T18265] pimreg: group set to 768 [ 324.618767][T18144] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 324.629941][T18144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.633735][T18144] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 324.639181][T18144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.642729][T18144] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.647672][T18144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.650840][T18144] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.656160][T18144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.733068][T18144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.746650][T18144] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.756418][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.759280][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.767810][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.770081][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.064076][T18144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.238477][T18144] veth0_vlan: entered promiscuous mode [ 325.249075][T18144] veth1_vlan: entered promiscuous mode [ 325.273583][T18144] veth0_macvtap: entered promiscuous mode [ 325.279846][T18144] veth1_macvtap: entered promiscuous mode [ 325.295706][T18144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.302289][T18144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.309847][ T3531] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.312698][ T3531] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.316865][ T3531] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.320421][ T3531] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.364580][ T5748] Bluetooth: hci1: command tx timeout [ 325.379286][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.383280][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.403621][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.406453][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.646776][T18375] binder: 18374:18375 ioctl 400454ca 0 returned -22 [ 326.896762][ T35] block nbd4: Connection timed out, retrying (0/1 alive) [ 326.899745][ T35] block nbd4: Dead connection, failed to find a fallback [ 326.902246][ T35] block nbd4: shutting down sockets [ 326.904330][ T35] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.907282][ T35] buffer_io_error: 10 callbacks suppressed [ 326.907290][ T35] Buffer I/O error on dev nbd4, logical block 0, async page read [ 326.914596][ T5747] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.917701][ T5747] Buffer I/O error on dev nbd4, logical block 0, async page read [ 326.920293][ T5747] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.923308][ T5747] Buffer I/O error on dev nbd4, logical block 0, async page read [ 326.925917][ T5747] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.928661][ T5747] Buffer I/O error on dev nbd4, logical block 0, async page read [ 326.931367][ T5747] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.934908][ T5747] Buffer I/O error on dev nbd4, logical block 0, async page read [ 326.937865][ T5747] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.940866][ T5747] Buffer I/O error on dev nbd4, logical block 0, async page read [ 326.943884][ T5747] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.946795][ T5747] Buffer I/O error on dev nbd4, logical block 0, async page read [ 326.949168][ T5747] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.951816][ T5747] Buffer I/O error on dev nbd4, logical block 0, async page read [ 326.955013][ T5747] ldm_validate_partition_table(): Disk read failed. [ 326.957801][ T5747] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.961444][ T5747] Buffer I/O error on dev nbd4, logical block 0, async page read [ 326.964680][ T5747] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.967364][ T5747] Buffer I/O error on dev nbd4, logical block 0, async page read [ 326.969876][ T5747] Dev nbd4: unable to read RDB block 0 [ 326.971711][ T5747] nbd4: unable to read partition table [ 326.977333][ T5747] ldm_validate_partition_table(): Disk read failed. [ 326.979611][ T5747] Dev nbd4: unable to read RDB block 0 [ 326.981519][ T5747] nbd4: unable to read partition table [ 327.457527][ T5748] Bluetooth: hci1: command tx timeout [ 327.674229][T18422] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 328.188452][ T8676] hid_parser_main: 68 callbacks suppressed [ 328.188467][ T8676] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 328.205861][ T8676] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 328.387568][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5516'. [ 328.390602][T18465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5516'. [ 328.399232][T18467] netlink: 'syz.0.5515': attribute type 2 has an invalid length. [ 328.843584][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5537'. [ 329.022150][T18525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5542'. [ 329.353139][ T843] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 329.503384][ T843] usb 9-1: Using ep0 maxpacket: 16 [ 329.508037][ T843] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 329.510986][ T843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.513661][ T843] usb 9-1: Product: syz [ 329.515001][ T843] usb 9-1: Manufacturer: syz [ 329.516517][ T843] usb 9-1: SerialNumber: syz [ 329.523160][ T5748] Bluetooth: hci1: command tx timeout [ 329.744509][ T843] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 329.757645][ T843] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 329.766054][ T843] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 329.769457][ T843] usb 9-1: media controller created [ 329.781974][ T843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.006655][ T843] zl10353_read_register: readreg error (reg=127, ret==-110) [ 330.040668][ T843] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 330.048779][ T843] usb 9-1: USB disconnect, device number 5 [ 330.167959][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5555'. [ 330.216118][ T5847] kernel write not supported for file /input/event2 (pid: 5847 comm: kworker/3:3) [ 330.267027][T18567] loop4: detected capacity change from 0 to 524287936 [ 330.673200][ T5128] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 330.824171][ T5128] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 330.829879][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.839689][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.847423][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.851218][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.855170][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.861216][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.865084][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.873333][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.883388][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.889116][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.895660][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.903516][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.907664][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.910707][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.914195][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.917119][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.920013][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.923798][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.926726][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.929703][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.933534][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.936422][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.939291][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.943554][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.947415][ T5128] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 330.950324][ T5128] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 330.952897][ T5128] usb 5-1: Product: syz [ 330.954338][ T5128] usb 5-1: Manufacturer: syz [ 330.955731][ T5128] usb 5-1: SerialNumber: syz [ 330.958862][ T5128] usb 5-1: config 0 descriptor?? [ 330.966678][ T5128] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 331.097963][T18606] vivid-007: disconnect [ 331.099780][T18605] vivid-007: reconnect [ 331.166857][ T5128] usb 5-1: USB disconnect, device number 30 [ 331.170963][ T5128] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 331.939390][T18633] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5588'. [ 332.405295][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5599'. [ 333.002608][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5610'. [ 333.008521][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5610'. [ 333.563092][ T8676] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 333.724673][ T8676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.729584][ T8676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.733994][ T8676] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.739236][ T8676] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.742368][ T8676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.751053][ T8676] usb 5-1: config 0 descriptor?? [ 333.773547][T18722] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 333.797142][T18715] syz.2.5624: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=/,mems_allowed=0-1 [ 333.802933][T18715] CPU: 3 UID: 0 PID: 18715 Comm: syz.2.5624 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.802975][T18715] Tainted: [L]=SOFTLOCKUP [ 333.802980][T18715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.802987][T18715] Call Trace: [ 333.802991][T18715] [ 333.802996][T18715] dump_stack_lvl+0x100/0x190 [ 333.803024][T18715] warn_alloc.cold+0x95/0x1c1 [ 333.803053][T18715] ? __pfx_warn_alloc+0x10/0x10 [ 333.803077][T18715] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 333.803112][T18715] ? _mutex_trylock_nest_lock+0x170/0x310 [ 333.803140][T18715] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 333.803171][T18715] ? __pfx___up_read+0x10/0x10 [ 333.803191][T18715] ? __folio_split+0x77c/0x1690 [ 333.803227][T18715] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 333.803247][T18715] ? xas_destroy+0x8c/0xc0 [ 333.803287][T18715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 333.803314][T18715] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 333.803338][T18715] ? policy_nodemask+0xed/0x4f0 [ 333.803370][T18715] alloc_pages_mpol+0x1fb/0x540 [ 333.803394][T18715] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 333.803417][T18715] ? rcu_is_watching+0x12/0xc0 [ 333.803450][T18715] ? irqentry_exit+0x24d/0x7e0 [ 333.803471][T18715] folio_alloc_mpol_noprof+0x36/0x260 [ 333.803498][T18715] alloc_migration_target_by_mpol+0x2c1/0x650 [ 333.803526][T18715] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 333.803553][T18715] ? __pfx___might_resched+0x10/0x10 [ 333.803573][T18715] ? migrate_pages_batch+0xaf4/0x45c0 [ 333.803602][T18715] migrate_pages_batch+0x5dc/0x45c0 [ 333.803629][T18715] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 333.803664][T18715] ? migrate_pages_sync+0x588/0x880 [ 333.803688][T18715] ? __pfx_migrate_pages_batch+0x10/0x10 [ 333.803718][T18715] ? __pfx_migrate_pages_sync+0x10/0x10 [ 333.803747][T18715] ? __lock_acquire+0x4a5/0x2630 [ 333.803769][T18715] migrate_pages+0x1975/0x2880 [ 333.803797][T18715] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 333.803827][T18715] ? mpol_set_shared_policy+0x291/0x890 [ 333.803852][T18715] ? mpol_set_shared_policy+0x291/0x890 [ 333.803877][T18715] ? __pfx_migrate_pages+0x10/0x10 [ 333.803904][T18715] ? find_held_lock+0x2b/0x80 [ 333.803927][T18715] ? do_mbind+0x555/0xfd0 [ 333.803956][T18715] ? up_write+0x28c/0x4f0 [ 333.803978][T18715] do_mbind+0x5a4/0xfd0 [ 333.804010][T18715] ? __pfx_do_mbind+0x10/0x10 [ 333.804039][T18715] ? vm_mmap_pgoff+0x103/0x470 [ 333.804082][T18715] ? __pfx_get_nodes+0x10/0x10 [ 333.804109][T18715] kernel_mbind+0x1b7/0x200 [ 333.804136][T18715] ? __pfx_kernel_mbind+0x10/0x10 [ 333.804164][T18715] ? rcu_is_watching+0x12/0xc0 [ 333.804190][T18715] __do_fast_syscall_32+0xe7/0x950 [ 333.804213][T18715] do_fast_syscall_32+0x32/0x70 [ 333.804233][T18715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.804258][T18715] RIP: 0023:0xf7f62f7c [ 333.804273][T18715] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 333.804290][T18715] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 333.804320][T18715] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 333.804331][T18715] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 333.804342][T18715] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 333.804357][T18715] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 333.804368][T18715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.804391][T18715] [ 333.923132][T18715] Mem-Info: [ 333.924858][T18715] active_anon:4329 inactive_anon:4907 isolated_anon:1536 [ 333.924858][T18715] active_file:7615 inactive_file:8422 isolated_file:0 [ 333.924858][T18715] unevictable:1768 dirty:10 writeback:0 [ 333.924858][T18715] slab_reclaimable:7488 slab_unreclaimable:64077 [ 333.924858][T18715] mapped:25320 shmem:5134 pagetables:1761 [ 333.924858][T18715] sec_pagetables:306 bounce:0 [ 333.924858][T18715] kernel_misc_reclaimable:0 [ 333.924858][T18715] free:61909 free_pcp:1867 free_cma:0 [ 333.945378][T18715] Node 0 active_anon:0kB inactive_anon:12kB active_file:84kB inactive_file:56kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:4kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8860kB pagetables:1424kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 333.963884][T18715] Node 0 DMA free:2776kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:112kB inactive_file:16kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 333.973457][T18715] lowmem_reserve[]: 0 285 285 285 285 [ 333.975164][T18715] Node 0 DMA32 free:17956kB boost:6144kB min:19232kB low:22504kB high:25776kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:12kB active_file:4kB inactive_file:8kB unevictable:3536kB writepending:4kB zspages:12kB present:1032196kB managed:292480kB mlocked:0kB bounce:0kB free_pcp:7464kB local_pcp:2176kB free_cma:0kB [ 333.985478][T18715] lowmem_reserve[]: 0 0 0 0 0 [ 333.987223][T18715] Node 0 DMA: 132*4kB (U) 33*8kB (U) 16*16kB (U) 10*32kB (U) 4*64kB (U) 3*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2776kB [ 333.991726][T18715] Node 0 DMA32: 887*4kB (UME) 324*8kB (UME) 87*16kB (UME) 70*32kB (UME) 39*64kB (UME) 14*128kB (UE) 5*256kB (U) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 17900kB [ 333.997245][T18715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.000250][T18715] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 334.003554][T18715] 21277 total pagecache pages [ 334.005092][T18715] 128 pages in swap cache [ 334.006570][T18715] Free swap = 120696kB [ 334.007928][T18715] Total swap = 124996kB [ 334.009313][T18715] 524155 pages RAM [ 334.010486][T18715] 0 pages HighMem/MovableOnly [ 334.011968][T18715] 210142 pages reserved [ 334.013938][T18715] 0 pages cma reserved [ 334.173987][ T8676] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 334.178845][ T8676] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 334.184055][ T8676] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 334.187697][ T8676] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 334.190109][ T8676] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 334.192522][ T8676] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 334.196483][ T8676] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 334.197482][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5633'. [ 334.200475][ T8676] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 334.208337][ T8676] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 334.210740][ T8676] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 334.224055][ T8676] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 334.424439][ T8676] usb 5-1: USB disconnect, device number 31 [ 335.215608][ T5169] block nbd0: Possible stuck request ffff888028105080: control (read@0,1024B). Runtime 210 seconds [ 335.218981][ T5169] block nbd0: Possible stuck request ffff888028105240: control (read@1024,1024B). Runtime 210 seconds [ 335.222350][ T5169] block nbd0: Possible stuck request ffff888028105400: control (read@2048,1024B). Runtime 210 seconds [ 335.225856][ T5169] block nbd0: Possible stuck request ffff8880281055c0: control (read@3072,1024B). Runtime 210 seconds [ 335.810620][T18784] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5653'. [ 335.843559][ T5101] Bluetooth: hci4: command 0x1003 tx timeout [ 335.854055][ T5748] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 336.165604][T18804] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.388672][ T5847] hid-generic 0000:0000:0000.000C: ignoring exceeding usage max [ 336.402487][ T5847] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz0 [ 336.426321][T18829] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.436224][T18829] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.439648][T18829] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.452671][T18831] fido_id[18831]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 336.465767][T18828] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.575120][T18829] infiniband syz2: set down [ 336.576694][ T5847] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.583571][T18829] infiniband syz2: added ip6_vti0 [ 336.593705][T18829] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 336.598412][T18829] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 336.603841][T18829] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 336.618222][T18829] RDS/IB: syz2: added [ 336.619609][T18829] smc: adding ib device syz2 with port count 1 [ 336.621630][T18829] smc: ib device syz2 port 1 has no pnetid [ 336.624076][ T5847] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.631206][T18829] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.725549][T18829] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.835649][T18829] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.944504][T18829] ip6_vti0 speed is unknown, defaulting to 1000 [ 337.096657][T18829] ip6_vti0 speed is unknown, defaulting to 1000 [ 337.561135][T18884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5698'. [ 337.609771][T18886] ref_ctr_offset mismatch. inode: 0x1e37 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 338.237670][T18915] netem: change failed [ 338.334695][T18923] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 338.337971][T18923] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 338.341756][T18923] overlayfs: failed to get uuid (1314/file2, err=-13); falling back to uuid=null. [ 338.781253][T18946] vivid-000: disconnect [ 338.786202][T18941] vivid-000: reconnect [ 339.220491][ T40] audit: type=1800 audit(1779826933.675:4415): pid=18970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5736" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 340.940586][T19032] bond1: invalid ARP target 0.0.0.0 specified for addition [ 340.944059][T19032] bond1: option arp_ip_target: invalid value (0) [ 340.948191][T19032] bond1 (unregistering): Released all slaves [ 341.151078][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5770'. [ 341.743151][ T8676] kernel read not supported for file /dsp1 (pid: 8676 comm: kworker/3:5) [ 342.132647][T19087] netlink: 'syz.3.5782': attribute type 4 has an invalid length. [ 342.138257][T19087] netlink: 4168 bytes leftover after parsing attributes in process `syz.3.5782'. [ 342.216565][T19092] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 342.222621][T19092] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 343.076447][ T40] audit: type=1326 audit(1779826937.535:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19098 comm="syz.3.5788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 343.086031][ T40] audit: type=1326 audit(1779826937.535:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19098 comm="syz.3.5788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 343.095631][ T40] audit: type=1326 audit(1779826937.555:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19098 comm="syz.3.5788" exe="/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 343.104682][ T40] audit: type=1326 audit(1779826937.555:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19098 comm="syz.3.5788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 343.114211][ T40] audit: type=1326 audit(1779826937.555:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19098 comm="syz.3.5788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 343.122649][ T40] audit: type=1326 audit(1779826937.565:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19098 comm="syz.3.5788" exe="/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 343.134522][ T40] audit: type=1326 audit(1779826937.565:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19098 comm="syz.3.5788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 343.144576][ T40] audit: type=1326 audit(1779826937.565:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19098 comm="syz.3.5788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 343.154190][ T40] audit: type=1326 audit(1779826937.565:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19098 comm="syz.3.5788" exe="/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 343.837714][T19183] nr0: tun_chr_ioctl cmd 21731 [ 343.909084][T19193] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.5828'. [ 344.165918][T19218] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5838'. [ 344.432942][T19246] netlink: 'syz.4.5850': attribute type 14 has an invalid length. [ 344.509889][T19248] raw_sendmsg: syz.4.5851 forgot to set AF_INET. Fix it! [ 344.823235][ T8675] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 345.003154][ T8675] usb 9-1: Using ep0 maxpacket: 8 [ 345.007463][ T8675] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 345.010938][ T8675] usb 9-1: config 0 has no interface number 0 [ 345.013810][ T8675] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.018298][ T8675] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 345.023268][ T8675] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 345.030113][ T8675] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 345.035663][ T8675] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 345.039683][ T8675] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.045449][ T8675] usb 9-1: config 0 descriptor?? [ 345.058250][ T8675] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 345.264695][ T5847] usb 9-1: USB disconnect, device number 6 [ 345.274487][ T5847] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 345.449075][T19274] netlink: 'syz.2.5862': attribute type 8 has an invalid length. [ 345.793065][ T8675] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 345.950010][ T8675] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 345.954089][ T8675] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 345.957598][ T8675] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 345.961510][ T8675] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 345.965464][ T8675] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 345.968656][ T8675] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 345.974932][ T8675] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 345.974947][ T8675] usb 5-1: Product: syz [ 345.974957][ T8675] usb 5-1: Manufacturer: syz [ 345.984514][ T8675] cdc_wdm 5-1:1.0: skipping garbage [ 345.991088][ T8675] cdc_wdm 5-1:1.0: skipping garbage [ 345.996209][ T8675] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 345.998733][ T8675] cdc_wdm 5-1:1.0: Unknown control protocol [ 346.119858][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5882'. [ 346.188081][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 346.190998][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 346.193921][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 346.196821][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 346.199682][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 346.202594][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 346.205650][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 346.208499][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 346.211528][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 346.214425][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 346.217661][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 346.220564][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 346.223832][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 346.226695][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 346.229771][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 346.232608][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 346.235768][ T5847] usb 5-1: USB disconnect, device number 32 [ 346.238475][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 346.238495][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 346.238511][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 346.589602][T19346] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 346.593146][T19346] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 346.597120][T19346] overlayfs: failed to set uuid (113/file0, err=-13); falling back to uuid=null. [ 346.676497][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5900'. [ 346.739278][T19358] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 346.742343][T19358] block device autoloading is deprecated and will be removed. [ 346.805861][T19362] loop5: detected capacity change from 0 to 7 [ 346.857246][ T35] blk_print_req_error: 27 callbacks suppressed [ 346.857271][ T35] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.866179][ T35] buffer_io_error: 27 callbacks suppressed [ 346.866195][ T35] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.875054][T19362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.880944][T19362] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.885038][T19362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.891314][T19362] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.899504][T19362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.899553][T19362] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.899669][T19362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.899692][T19362] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.899802][T19362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.899826][T19362] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.899923][T19362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.899946][T19362] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.900014][T19362] ldm_validate_partition_table(): Disk read failed. [ 346.900064][T19362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.900087][T19362] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.900191][T19362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.946533][T19362] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.946701][T19362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.953717][T19362] Buffer I/O error on dev loop5, logical block 0, async page read [ 346.953930][T19362] Dev loop5: unable to read RDB block 0 [ 346.954447][T19362] loop5: unable to read partition table [ 346.960977][T19370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5914'. [ 346.962105][T19362] loop5: partition table beyond EOD, truncated [ 346.965408][T19362] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 347.233414][ T8675] e1000 0000:00:06.0 eth0: Reset adapter [ 349.285704][ T35] block nbd1: Possible stuck request ffff88802813e000: control (read@0,1024B). Runtime 210 seconds [ 349.290027][ T35] block nbd1: Possible stuck request ffff88802813e1c0: control (read@1024,1024B). Runtime 210 seconds [ 349.294428][ T35] block nbd1: Possible stuck request ffff88802813e380: control (read@2048,1024B). Runtime 210 seconds [ 349.298709][ T35] block nbd1: Possible stuck request ffff88802813e540: control (read@3072,1024B). Runtime 210 seconds [ 349.444165][ T8675] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 353.274059][ T5151] udevd[5151]: worker [10626] /devices/virtual/block/nbd1 timeout; kill it [ 353.277723][ T5151] udevd[5151]: seq 14419 '/devices/virtual/block/nbd1' killed [ 359.924360][ T843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 365.283358][ T5169] block nbd0: Possible stuck request ffff888028105080: control (read@0,1024B). Runtime 240 seconds [ 365.287833][ T5169] block nbd0: Possible stuck request ffff888028105240: control (read@1024,1024B). Runtime 240 seconds [ 365.292330][ T5169] block nbd0: Possible stuck request ffff888028105400: control (read@2048,1024B). Runtime 240 seconds [ 365.298068][ T5169] block nbd0: Possible stuck request ffff8880281055c0: control (read@3072,1024B). Runtime 240 seconds [ 368.308532][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5921'. [ 369.223854][T19507] sctp: [Deprecated]: syz.4.5941 (pid 19507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.223854][T19507] Use struct sctp_sack_info instead [ 369.469749][T19525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5950'. [ 369.472848][T19525] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5950'. [ 369.475921][T19525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5950'. [ 369.833246][T19537] ip6_vti0 speed is unknown, defaulting to 1000 [ 370.843554][T10003] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 370.853054][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 371.003416][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 371.006492][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56834, setting to 1024 [ 371.009841][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 371.012710][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.015903][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.019587][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 371.022098][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.233888][ T9] usb 9-1: GET_CAPABILITIES returned 0 [ 371.235586][ T9] usbtmc 9-1:16.0: can't read capabilities [ 371.437777][ T9] usb 9-1: USB disconnect, device number 7 [ 372.655936][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5995'. [ 372.661643][T19621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5994'. [ 372.715955][T19625] vivid-000: ================= START STATUS ================= [ 372.720664][T19625] vivid-000: Test Pattern: 75% Colorbar [ 372.723875][T19625] vivid-000: Fill Percentage of Frame: 5 [ 372.726602][T19625] vivid-000: Horizontal Movement: No Movement [ 372.728570][T19625] vivid-000: Vertical Movement: No Movement [ 372.730474][T19625] vivid-000: OSD Text Mode: All [ 372.732024][T19625] vivid-000: Show Border: false [ 372.734358][T19625] vivid-000: Show Square: false [ 372.736390][T19625] vivid-000: Sensor Flipped Horizontally: false [ 372.744502][T19625] vivid-000: Sensor Flipped Vertically: false [ 372.746549][T19625] vivid-000: Insert SAV Code in Image: false [ 372.748589][T19625] vivid-000: Insert EAV Code in Image: false [ 372.750566][T19625] vivid-000: Insert Video Guard Band: false [ 372.752957][T19625] vivid-000: Reduced Framerate: false [ 372.755934][T19625] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 372.758326][T19625] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 372.760783][T19625] vivid-000: Enable Capture Cropping: true [ 372.766534][T19625] vivid-000: Enable Capture Composing: true [ 372.768902][T19625] vivid-000: Enable Capture Scaler: true [ 372.777212][T19625] vivid-000: Timestamp Source: End of Frame [ 372.779564][T19625] vivid-000: Colorspace: sRGB [ 372.781479][T19625] vivid-000: Transfer Function: Default [ 372.783979][T19625] vivid-000: Y'CbCr Encoding: Default [ 372.786110][T19625] vivid-000: HSV Encoding: Hue 0-179 [ 372.788100][T19625] vivid-000: Quantization: Default [ 372.790558][T19625] vivid-000: Apply Alpha To Red Only: false [ 372.792755][T19625] vivid-000: Standard Aspect Ratio: 4x3 [ 372.795356][T19625] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 372.798079][T19625] vivid-000: DV Timings: 640x480p59 inactive [ 372.800036][T19625] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 372.802440][T19625] vivid-000: Maximum EDID Blocks: 2 [ 372.806106][T19625] vivid-000: Limited RGB Range (16-235): false [ 372.807859][T19625] vivid-000: Rx RGB Quantization Range: Automatic [ 372.809813][T19625] vivid-000: Power Present: 0x00000001 [ 372.811544][T19625] tpg source WxH: 320x240 (Y'CbCr) [ 372.813695][T19625] tpg field: 1 [ 372.814784][T19625] tpg crop: (0,0)/320x240 [ 372.816180][T19625] tpg compose: (0,0)/320x240 [ 372.817759][T19625] tpg colorspace: 8 [ 372.819450][T19625] tpg transfer function: 0/2 [ 372.820935][T19625] tpg Y'CbCr encoding: 0/1 [ 372.822347][T19625] tpg quantization: 0/2 [ 372.824643][T19625] tpg RGB range: 0/2 [ 372.825923][T19625] vivid-000: ================== END STATUS ================== [ 372.884506][ T5101] Bluetooth: hci4: command 0x1003 tx timeout [ 372.884523][ T5748] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 372.937892][T19637] binder: 19636:19637 ioctl c0306201 0 returned -14 [ 373.316415][T19678] input: syz1 as /devices/virtual/input/input44 [ 373.490879][T19675] ip6_vti0 speed is unknown, defaulting to 1000 [ 373.691352][T19700] netem: change failed [ 374.120481][T10003] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.123717][T10003] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.126850][T10003] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.131936][T10003] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.378329][ T843] hid_parser_main: 27 callbacks suppressed [ 374.378344][ T843] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 374.401928][ T843] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 374.783322][ T843] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 374.945200][ T843] usb 9-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 374.948818][ T843] usb 9-1: config 0 interface 0 has no altsetting 0 [ 374.953607][ T843] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 374.956933][ T843] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 374.959536][ T843] usb 9-1: Product: syz [ 374.961077][ T843] usb 9-1: Manufacturer: syz [ 374.962817][ T843] usb 9-1: SerialNumber: syz [ 374.970121][ T843] usb 9-1: config 0 descriptor?? [ 374.972782][T19748] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.978807][ T843] usb 9-1: selecting invalid altsetting 0 [ 375.192090][T19748] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 375.214677][ T5128] usb 9-1: USB disconnect, device number 8 [ 375.335796][T19773] kernel profiling enabled (shift: 17) [ 375.451684][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6067'. [ 375.562859][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6073'. [ 375.652874][T19805] veth1_to_bond: entered allmulticast mode [ 375.657191][T19805] veth1_to_bond: left allmulticast mode [ 376.089222][T19827] input: syz1 as /devices/virtual/input/input45 [ 376.244234][T19829] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.260179][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 377.260190][ T40] audit: type=1326 audit(1779826971.715:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.3.6114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 377.269184][ T40] audit: type=1326 audit(1779826971.715:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.3.6114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 377.286376][ T40] audit: type=1326 audit(1779826971.715:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.3.6114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 377.301720][ T40] audit: type=1326 audit(1779826971.715:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.3.6114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 377.309785][ T40] audit: type=1326 audit(1779826971.715:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.3.6114" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 377.318374][ T40] audit: type=1326 audit(1779826971.715:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.3.6114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 377.327150][ T40] audit: type=1326 audit(1779826971.715:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.3.6114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 377.336525][ T40] audit: type=1326 audit(1779826971.715:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.3.6114" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 377.348312][ T40] audit: type=1326 audit(1779826971.715:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.3.6114" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 377.601910][T19898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 377.608538][T19898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 377.611230][T19898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 377.613684][T19898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 377.614628][T19900] team0: Caught tx_queue_len zero misconfig [ 377.616345][T19898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 377.620885][T19898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 377.623595][T19898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 377.626189][T19898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 377.628316][T19898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 377.630899][T19898] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 377.856793][ T1344] kernel read not supported for file /vcs (pid: 1344 comm: kworker/3:2) [ 378.041869][T19921] input: syz1 as /devices/virtual/input/input46 [ 378.110526][T19925] o2cb: This node has not been configured. [ 378.115814][T19925] o2cb: Cluster check failed. Fix errors before retrying. [ 378.118157][T19925] (syz.0.6134,19925,3):user_dlm_register:674 ERROR: status = -22 [ 378.121134][T19925] (syz.0.6134,19925,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 378.558905][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6144'. [ 378.624012][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6147'. [ 378.629016][T19956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6147'. [ 379.027352][T19988] input: syz1 as /devices/virtual/input/input47 [ 379.364260][ T35] block nbd1: Possible stuck request ffff88802813e000: control (read@0,1024B). Runtime 240 seconds [ 379.368764][ T35] block nbd1: Possible stuck request ffff88802813e1c0: control (read@1024,1024B). Runtime 240 seconds [ 379.373311][ T35] block nbd1: Possible stuck request ffff88802813e380: control (read@2048,1024B). Runtime 240 seconds [ 379.378124][ T35] block nbd1: Possible stuck request ffff88802813e540: control (read@3072,1024B). Runtime 240 seconds [ 379.759942][T20037] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6185'. [ 379.767244][T20037] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6185'. [ 379.771055][T20037] netlink: 'syz.4.6185': attribute type 6 has an invalid length. [ 379.776837][T20037] netlink: 'syz.4.6185': attribute type 5 has an invalid length. [ 381.924566][ T5128] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 383.211347][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.214136][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.329640][T20076] loop5: detected capacity change from 0 to 7 [ 390.332902][ C3] blk_print_req_error: 5 callbacks suppressed [ 390.332919][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.339206][ C3] buffer_io_error: 5 callbacks suppressed [ 390.339221][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 390.346076][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.350467][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 390.358215][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.362095][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 390.365830][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.369629][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 390.374057][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.377836][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 390.381290][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.385111][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 390.388719][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.392394][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 390.395459][T20076] ldm_validate_partition_table(): Disk read failed. [ 390.405585][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.409685][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 390.419511][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.422803][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 390.428557][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.431702][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 390.435074][T20076] Dev loop5: unable to read RDB block 0 [ 390.439118][T20076] loop5: unable to read partition table [ 390.441981][T20076] loop5: partition table beyond EOD, truncated [ 390.445489][T20076] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 391.853126][ T8676] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 391.887977][T20135] net_ratelimit: 3320 callbacks suppressed [ 391.887998][T20135] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 391.895796][T20135] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 391.901561][T20135] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 391.904344][T20135] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 391.908659][T20135] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 391.911342][T20135] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 391.913857][T20135] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 391.915917][T20135] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 391.918240][T20135] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 391.920841][T20135] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 391.954940][T20138] CUSE: info not properly terminated [ 392.015948][ T8676] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 392.029585][ T8676] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 392.034589][ T8676] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.043890][ T8676] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 392.051332][ T8676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 392.055099][ T8676] usb 5-1: Product: syz [ 392.056891][ T8676] usb 5-1: Manufacturer: syz [ 392.058902][ T8676] usb 5-1: SerialNumber: syz [ 392.283242][ T8676] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 392.479086][ T5128] usb 5-1: USB disconnect, device number 33 [ 392.494960][ T5128] usblp0: removed [ 392.496533][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6228'. [ 392.506137][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6228'. [ 393.099275][ T5101] Bluetooth: hci4: sending frame failed (-49) [ 393.110280][ T5748] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 393.629711][T20208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6250'. [ 393.634010][T20208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6250'. [ 393.637838][T20208] netlink: 'syz.3.6250': attribute type 13 has an invalid length. [ 393.641575][T20208] netlink: 'syz.3.6250': attribute type 11 has an invalid length. [ 393.822808][T20219] ip6gre0: Caught tx_queue_len zero misconfig [ 394.240326][T14441] syz_tun (unregistering): left allmulticast mode [ 394.245747][T14441] syz_tun (unregistering): left promiscuous mode [ 394.248821][T14441] bridge0: port 1(syz_tun) entered disabled state [ 394.589905][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 394.596558][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 394.601084][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 394.608219][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 394.612651][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 395.022124][T20245] ip6_vti0 speed is unknown, defaulting to 1000 [ 395.364790][ T5169] block nbd0: Possible stuck request ffff888028105080: control (read@0,1024B). Runtime 270 seconds [ 395.369177][ T5169] block nbd0: Possible stuck request ffff888028105240: control (read@1024,1024B). Runtime 270 seconds [ 395.373920][ T5169] block nbd0: Possible stuck request ffff888028105400: control (read@2048,1024B). Runtime 270 seconds [ 395.376422][T20245] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.378255][ T5169] block nbd0: Possible stuck request ffff8880281055c0: control (read@3072,1024B). Runtime 270 seconds [ 395.380612][T20245] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.389807][T20245] bridge_slave_0: entered allmulticast mode [ 395.393135][T20245] bridge_slave_0: entered promiscuous mode [ 395.396357][T20245] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.398644][T20245] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.401072][T20245] bridge_slave_1: entered allmulticast mode [ 395.404114][T20245] bridge_slave_1: entered promiscuous mode [ 395.425122][T20245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.430304][T20245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.447918][T20245] team0: Port device team_slave_0 added [ 395.454005][T20245] team0: Port device team_slave_1 added [ 395.468575][T20245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.471266][T20245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.479414][T20245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.484658][T20245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.487101][T20245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.495150][T20245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.519433][T20245] hsr_slave_0: entered promiscuous mode [ 395.521610][T20245] hsr_slave_1: entered promiscuous mode [ 395.524091][T20245] debugfs: 'hsr0' already exists in 'hsr' [ 395.526211][T20245] Cannot create hsr debugfs directory [ 395.674914][T20245] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 395.684068][T20245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.688041][T20245] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 395.694731][T20245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.698685][T20245] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 395.705269][T20245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.709142][T20245] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 395.715903][T20245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.732810][T20245] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.735782][T20245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.738781][T20245] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.741536][T20245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.763220][ T5744] Bluetooth: hci4: command 0x1003 tx timeout [ 395.765142][ T5748] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 395.809784][T20245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.828544][T20245] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.836341][ T1186] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.843785][ T1186] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.858447][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.860742][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.871762][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.874048][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.176073][T20245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.206967][ T6405] tipc: Subscription rejected, illegal request [ 396.365058][T20245] veth0_vlan: entered promiscuous mode [ 396.370826][T20245] veth1_vlan: entered promiscuous mode [ 396.404086][T20245] veth0_macvtap: entered promiscuous mode [ 396.408509][T20245] veth1_macvtap: entered promiscuous mode [ 396.419100][T20245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.427495][T20245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.437835][ T6405] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.445406][ T6405] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.453894][ T6405] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.458669][ T6405] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.533985][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.542580][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.561324][ T6405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.565659][ T6405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.643801][ T5748] Bluetooth: hci2: command tx timeout [ 396.666586][T20340] block nbd5: not configured, cannot reconfigure [ 397.033566][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 397.193523][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 397.202539][ T9] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 397.213931][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.220370][ T9] usb 9-1: Product: syz [ 397.222135][ T9] usb 9-1: Manufacturer: syz [ 397.234217][ T9] usb 9-1: SerialNumber: syz [ 397.462412][ T9] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 397.469598][ T9] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 397.475536][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 397.481933][ T9] usb 9-1: media controller created [ 397.495665][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.726246][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 397.795185][ T9] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 397.819146][ T9] usb 9-1: USB disconnect, device number 9 [ 398.063387][ T1344] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 398.238260][ T1344] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 398.245187][ T1344] usb 10-1: config 0 has no interface number 0 [ 398.250131][ T1344] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 398.257740][ T1344] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 398.262569][ T1344] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 398.268712][ T1344] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 398.273138][ T1344] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 398.276593][ T1344] usb 10-1: Product: syz [ 398.278526][ T1344] usb 10-1: SerialNumber: syz [ 398.282039][ T1344] usb 10-1: config 0 descriptor?? [ 398.285578][ T1344] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 398.288967][ T1344] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input48 [ 398.406140][T20410] lo: entered allmulticast mode [ 398.494567][ C3] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.494624][ T9] usb 10-1: USB disconnect, device number 2 [ 398.497725][ C3] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 398.508945][ T9] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 398.726051][ T5748] Bluetooth: hci2: command tx timeout [ 398.851182][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6340'. [ 399.282435][T20464] can0: slcan on ttyS3. [ 399.325446][T20470] ieee802154 phy0 wpan0: encryption failed: -22 [ 399.372038][T20474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6354'. [ 399.384544][T20464] can0 (unregistered): slcan off ttyS3. [ 399.472358][T20481] erspan0: entered promiscuous mode [ 399.765792][T20504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6368'. [ 399.834868][T20511] hugetlbfs: syz.4.6372 (20511): Using mlock ulimits for SHM_HUGETLB is obsolete [ 400.009662][T20524] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6386'. [ 400.014398][T20524] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6386'. [ 400.154685][T20527] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.269895][T20527] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.410905][T20527] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.562682][T20527] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.619591][T20538] netlink: 'syz.0.6383': attribute type 4 has an invalid length. [ 400.714626][T20540] bond1: Unable to set down delay as MII monitoring is disabled [ 400.720172][T20540] bond1 (unregistering): Released all slaves [ 400.732930][ T3531] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.751028][ T3531] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.770923][ T283] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.784137][ T283] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.803480][ T5748] Bluetooth: hci2: command tx timeout [ 401.392821][T20572] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6400'. [ 401.469267][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 401.693371][ T5845] e1000 0000:00:06.0 eth0: Reset adapter [ 401.823599][ T5845] e1000 0000:00:06.0 eth0: Reset adapter [ 402.883399][ T5748] Bluetooth: hci2: command tx timeout [ 404.004065][ T843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 409.447678][ T2202] block nbd1: Possible stuck request ffff88802813e000: control (read@0,1024B). Runtime 270 seconds [ 409.452179][ T2202] block nbd1: Possible stuck request ffff88802813e1c0: control (read@1024,1024B). Runtime 270 seconds [ 409.460089][ T2202] block nbd1: Possible stuck request ffff88802813e380: control (read@2048,1024B). Runtime 270 seconds [ 409.464070][ T2202] block nbd1: Possible stuck request ffff88802813e540: control (read@3072,1024B). Runtime 270 seconds [ 419.720926][T20642] binder: 20641:20642 ioctl c0306201 80000480 returned -14 [ 420.031350][ T5845] kernel write not supported for file /ppp (pid: 5845 comm: kworker/2:3) [ 420.397194][T20686] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 420.688218][T20699] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6440'. [ 420.935852][T20697] ip6_vti0 speed is unknown, defaulting to 1000 [ 423.843173][T20731] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 423.843324][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 423.977594][T20759] fuse: Bad value for 'fd' [ 424.663280][T20731] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 424.665974][T20731] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 424.679082][T20731] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 424.686393][T20731] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 424.688845][T20731] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 424.694198][T20731] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 424.769508][T20761] sctp: [Deprecated]: syz.4.6466 (pid 20761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.769508][T20761] Use struct sctp_sack_info instead [ 424.778653][T20761] sctp: [Deprecated]: syz.4.6466 (pid 20761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.778653][T20761] Use struct sctp_sack_info instead [ 424.871538][T20774] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6472'. [ 424.875545][T20774] bridge_slave_0: Caught tx_queue_len zero misconfig [ 425.046754][T20769] ip6_vti0 speed is unknown, defaulting to 1000 [ 425.125660][T20786] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.128519][T20786] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.179367][T20786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.188553][T20786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.233075][ T5846] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 425.256715][ T3531] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.260183][ T3531] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.264385][ T3531] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.287538][ T3531] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.375237][T20793] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6478'. [ 425.384717][ T5846] usb 9-1: Using ep0 maxpacket: 32 [ 425.389061][ T5846] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 425.401550][ T5846] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 425.406565][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 425.410092][ T5846] usb 9-1: Product: syz [ 425.411846][ T5846] usb 9-1: Manufacturer: syz [ 425.414257][ T5846] usb 9-1: SerialNumber: syz [ 425.418560][ T5846] usb 9-1: config 0 descriptor?? [ 425.421585][T20782] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 425.427938][ T5846] hub 9-1:0.0: bad descriptor, ignoring hub [ 425.430516][ T5846] hub 9-1:0.0: probe with driver hub failed with error -5 [ 425.443706][ T5169] block nbd0: Possible stuck request ffff888028105080: control (read@0,1024B). Runtime 300 seconds [ 425.448233][ T5169] block nbd0: Possible stuck request ffff888028105240: control (read@1024,1024B). Runtime 300 seconds [ 425.452829][ T5169] block nbd0: Possible stuck request ffff888028105400: control (read@2048,1024B). Runtime 300 seconds [ 425.457479][ T5169] block nbd0: Possible stuck request ffff8880281055c0: control (read@3072,1024B). Runtime 300 seconds [ 425.634022][T20803] Bluetooth: hci0: load_link_keys: too big key_count value 53767 [ 425.722685][ T40] audit: type=1326 audit(1779827020.175:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20805 comm="syz.0.6485" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704ef7c code=0x0 [ 425.905228][T20819] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.6489'. [ 425.934640][ T5748] Bluetooth: hci1: command 0x0c1a tx timeout [ 426.098362][T20782] usb 9-1: reset high-speed USB device number 10 using dummy_hcd [ 426.282794][T20782] usb 9-1: device firmware changed [ 426.298292][ T1344] usb 9-1: USB disconnect, device number 10 [ 426.350716][T20835] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 426.453107][ T1344] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 426.502886][T20841] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6499'. [ 426.623066][ T1344] usb 9-1: Using ep0 maxpacket: 32 [ 426.630513][ T1344] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 426.639863][ T1344] usb 9-1: string descriptor 0 read error: -22 [ 426.642766][ T1344] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 426.647369][ T1344] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 426.653640][ T1344] usb 9-1: config 0 descriptor?? [ 426.661868][T20809] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 426.674848][ T1344] hub 9-1:0.0: bad descriptor, ignoring hub [ 426.679472][ T1344] hub 9-1:0.0: probe with driver hub failed with error -5 [ 426.723085][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 427.003631][ T10] usb 9-1: USB disconnect, device number 11 [ 427.710314][T20902] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6527'. [ 427.992861][T20929] loop7: detected capacity change from 0 to 7 [ 428.002345][ C3] blk_print_req_error: 10 callbacks suppressed [ 428.002362][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.008684][ C3] buffer_io_error: 10 callbacks suppressed [ 428.008697][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.013465][ T5748] Bluetooth: hci1: command 0x0c1a tx timeout [ 428.018811][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.022367][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.026938][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.030565][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.034855][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.038393][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.041204][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.044018][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.048151][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.051000][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.053746][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.056597][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.059025][T20929] ldm_validate_partition_table(): Disk read failed. [ 428.064037][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.068077][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.070962][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.076544][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.079406][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.081985][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 428.086443][T20929] Dev loop7: unable to read RDB block 0 [ 428.092168][T20929] loop7: unable to read partition table [ 428.096797][T20929] loop7: partition table beyond EOD, truncated [ 428.109365][T20929] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 428.129103][ T5151] ldm_validate_partition_table(): Disk read failed. [ 428.131681][ T5151] Dev loop7: unable to read RDB block 0 [ 428.135083][ T5151] loop7: unable to read partition table [ 428.137056][ T5151] loop7: partition table beyond EOD, truncated [ 428.267210][T20946] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6546'. [ 428.366570][T20955] netlink: 'syz.3.6550': attribute type 2 has an invalid length. [ 428.725157][T20982] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6562'. [ 428.803211][ T1344] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 428.803296][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 428.954965][T20992] pim6reg1: entered promiscuous mode [ 428.956765][T20992] pim6reg1: entered allmulticast mode [ 428.963835][ T1344] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 428.967743][ T1344] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.970640][ T1344] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.974852][ T1344] usb 9-1: config 0 interface 0 has no altsetting 0 [ 428.978807][ T1344] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.981866][ T1344] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.987888][ T1344] usb 9-1: config 0 interface 0 has no altsetting 0 [ 428.991934][ T1344] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.996562][ T1344] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 429.000663][ T1344] usb 9-1: config 0 interface 0 has no altsetting 0 [ 429.004801][ T1344] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.008394][ T1344] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 429.013368][ T1344] usb 9-1: config 0 interface 0 has no altsetting 0 [ 429.017277][ T1344] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.020815][ T1344] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 429.024709][ T1344] usb 9-1: config 0 interface 0 has no altsetting 0 [ 429.026828][T20996] netlink: 428 bytes leftover after parsing attributes in process `syz.0.6569'. [ 429.028316][ T1344] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.030041][T20996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6569'. [ 429.032813][ T1344] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 429.040172][ T1344] usb 9-1: config 0 interface 0 has no altsetting 0 [ 429.044287][ T1344] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.047362][ T1344] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 429.051303][ T1344] usb 9-1: config 0 interface 0 has no altsetting 0 [ 429.055349][ T1344] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.058668][ T1344] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 429.063647][ T1344] usb 9-1: config 0 interface 0 has no altsetting 0 [ 429.068417][ T1344] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 429.072733][ T1344] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 429.075975][ T1344] usb 9-1: Product: syz [ 429.077456][ T1344] usb 9-1: Manufacturer: syz [ 429.079202][ T1344] usb 9-1: SerialNumber: syz [ 429.083575][ T1344] usb 9-1: config 0 descriptor?? [ 429.091908][ T1344] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 429.143578][T21002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.306121][ T10] usb 9-1: USB disconnect, device number 12 [ 429.315718][ T10] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 430.065010][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'. [ 430.069906][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'. [ 430.084069][ T5748] Bluetooth: hci1: command 0x0c1a tx timeout [ 430.356090][T21055] input: syz1 as /devices/virtual/input/input49 [ 430.883133][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 431.493814][T21080] loop6: detected capacity change from 0 to 7 [ 431.508138][ T1186] Bluetooth: hci4: Frame reassembly failed (-84) [ 431.533510][T21080] loop6: detected capacity change from 7 to 0 [ 431.983290][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 432.137574][ T10] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 432.141425][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.144730][ T10] usb 9-1: Product: syz [ 432.146493][ T10] usb 9-1: Manufacturer: syz [ 432.148367][ T10] usb 9-1: SerialNumber: syz [ 432.152161][ T10] usb 9-1: config 0 descriptor?? [ 432.366428][ T8675] usb 9-1: USB disconnect, device number 13 [ 432.633511][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 432.814499][ T10] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 432.818056][ T10] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 432.821833][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 432.825392][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 432.829707][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 432.836249][ T10] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 432.839956][ T10] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 432.843170][ T10] usb 10-1: Product: syz [ 432.844931][ T10] usb 10-1: Manufacturer: syz [ 432.855485][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 432.857807][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 432.861791][ T10] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 432.864342][ T10] cdc_wdm 10-1:1.0: Unknown control protocol [ 432.908558][T21118] syzkaller1: entered promiscuous mode [ 432.910441][T21118] syzkaller1: entered allmulticast mode [ 433.060732][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 433.062847][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 433.065087][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 433.067284][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 433.069779][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 433.071889][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 433.074326][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 433.076533][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 433.078948][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 433.081028][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 433.083158][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 433.085372][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 433.087758][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 433.089763][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 433.092218][ T10] usb 10-1: USB disconnect, device number 3 [ 433.092276][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 433.097201][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 433.099152][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 433.403143][ T1344] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 433.523579][ T5744] Bluetooth: hci4: command 0xfc11 tx timeout [ 433.530474][ T5748] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 433.573165][ T1344] usb 9-1: Using ep0 maxpacket: 32 [ 433.581982][ T1344] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 433.587752][ T1344] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 433.591127][ T1344] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 433.593728][ T1344] usb 9-1: Product: syz [ 433.594957][ T1344] usb 9-1: Manufacturer: syz [ 433.596763][ T1344] usb 9-1: SerialNumber: syz [ 433.604821][ T1344] usb 9-1: config 0 descriptor?? [ 433.609208][T21127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 433.612671][ T1344] hub 9-1:0.0: bad descriptor, ignoring hub [ 433.616926][ T1344] hub 9-1:0.0: probe with driver hub failed with error -5 [ 434.524721][T21127] usb 9-1: reset high-speed USB device number 14 using dummy_hcd [ 434.675026][T21127] usb 9-1: device firmware changed [ 434.677384][ T1344] usb 9-1: USB disconnect, device number 14 [ 434.823553][ T1344] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 434.973136][ T1344] usb 9-1: Using ep0 maxpacket: 32 [ 434.977018][ T1344] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 434.983928][ T1344] usb 9-1: string descriptor 0 read error: -22 [ 434.986627][ T1344] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 434.990266][ T1344] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 434.996658][ T1344] usb 9-1: config 0 descriptor?? [ 434.999528][T21135] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 435.002893][ T1344] hub 9-1:0.0: bad descriptor, ignoring hub [ 435.008237][ T1344] hub 9-1:0.0: probe with driver hub failed with error -5 [ 435.286043][T21162] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6642'. [ 435.323732][ T5846] usb 9-1: USB disconnect, device number 15 [ 435.528014][T21173] net_ratelimit: 317 callbacks suppressed [ 435.528033][T21173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.711633][T21181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6650'. [ 435.949440][T21195] : renamed from bond0 (while UP) [ 436.043094][ T1344] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 436.059931][T21202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6659'. [ 436.062726][T21202] netlink: 'syz.5.6659': attribute type 7 has an invalid length. [ 436.066569][T21202] netlink: 'syz.5.6659': attribute type 8 has an invalid length. [ 436.069014][T21202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6659'. [ 436.074718][T21202] erspan0: entered promiscuous mode [ 436.077355][T21202] gretap0: entered promiscuous mode [ 436.099481][T21202] erspan0: left promiscuous mode [ 436.102765][T21202] gretap0: left promiscuous mode [ 436.203279][ T1344] usb 5-1: Using ep0 maxpacket: 8 [ 436.211818][ T1344] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 436.214845][ T1344] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.222197][ T1344] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.226747][ T1344] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.233180][ T1344] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.244982][ T1344] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 436.255606][ T1344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.481078][ T1344] usb 5-1: usb_control_msg returned -32 [ 436.483247][ T1344] usbtmc 5-1:16.0: can't read capabilities [ 436.836868][T21256] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 436.841462][ T1344] usb 5-1: USB disconnect, device number 34 [ 437.000326][T21278] netlink: 'syz.3.6671': attribute type 1 has an invalid length. [ 437.590419][T21314] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6687'. [ 437.713791][T21318] Invalid logical block size (8) [ 438.297768][T21364] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6711'. [ 438.301128][T21366] loop5: detected capacity change from 0 to 7 [ 438.314278][ T5748] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 438.803384][ T8675] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 438.963302][ T8675] usb 5-1: Using ep0 maxpacket: 8 [ 438.966806][ T8675] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 438.969304][ T8675] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 438.972782][ T8675] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 438.976341][ T8675] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 438.980294][ T8675] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 438.984269][ T8675] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 438.988254][ T8675] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 438.992739][ T8675] usb 5-1: config 168 interface 0 has no altsetting 0 [ 438.996655][ T8675] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 438.999553][ T8675] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 439.003085][ T8675] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 439.006764][ T8675] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.010582][ T8675] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 439.019548][ T8675] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 439.024163][ T8675] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 439.029281][ T8675] usb 5-1: config 168 interface 0 has no altsetting 0 [ 439.032256][ T8675] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 439.034668][ T8675] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 439.037992][ T8675] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 439.041507][ T8675] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.050889][ T8675] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 439.060039][ T8675] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 439.064177][ T8675] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 439.068811][ T8675] usb 5-1: config 168 interface 0 has no altsetting 0 [ 439.075217][ T8675] usb 5-1: string descriptor 0 read error: -22 [ 439.077930][ T8675] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 439.081465][ T8675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.092769][ T8675] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 439.231389][T21388] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6722'. [ 439.340501][ T5846] usb 5-1: USB disconnect, device number 35 [ 439.423421][T21400] Invalid ELF header magic: != ELF [ 439.526286][ T2202] block nbd1: Possible stuck request ffff88802813e000: control (read@0,1024B). Runtime 300 seconds [ 439.531433][ T2202] block nbd1: Possible stuck request ffff88802813e1c0: control (read@1024,1024B). Runtime 300 seconds [ 439.539159][ T2202] block nbd1: Possible stuck request ffff88802813e380: control (read@2048,1024B). Runtime 300 seconds [ 439.544623][ T2202] block nbd1: Possible stuck request ffff88802813e540: control (read@3072,1024B). Runtime 300 seconds [ 440.043398][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 440.203423][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 440.207077][ T10] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.211390][ T10] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.215549][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 440.218204][ T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 440.221473][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.227051][ T10] usb 9-1: config 0 descriptor?? [ 440.654812][ T10] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 440.657763][ T10] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 440.658270][T21457] overlay: Unknown parameter '/' [ 440.660518][ T10] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 440.660541][ T10] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 440.660562][ T10] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 440.671453][ T10] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 440.675791][T21457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6755'. [ 440.729558][T21459] syzkaller1: entered promiscuous mode [ 440.731764][T21459] syzkaller1: entered allmulticast mode [ 440.849507][ T5846] usb 9-1: USB disconnect, device number 16 [ 441.767409][ T5748] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 441.824735][T21495] syzkaller1: entered promiscuous mode [ 441.827198][T21495] syzkaller1: entered allmulticast mode [ 442.261491][T21521] Invalid argument reading file caps for ./file0 [ 442.280493][T10003] Bluetooth: hci4: Frame reassembly failed (-84) [ 442.282934][T21522] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 442.286770][ T3531] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 442.289418][ T3531] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 442.535029][T21528] syzkaller1: entered promiscuous mode [ 442.536986][T21528] syzkaller1: entered allmulticast mode [ 443.374744][T21552] geneve3: entered promiscuous mode [ 443.553304][ T9] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 443.569418][T21554] ip6_vti0 speed is unknown, defaulting to 1000 [ 443.715823][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 443.720978][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 443.726302][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.730520][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 443.736390][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 443.741778][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 443.745470][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 443.754130][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.758992][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 443.762652][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 443.767217][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 443.769569][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 443.778709][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.782331][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 443.786074][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 443.791638][ T9] usb 9-1: string descriptor 0 read error: -22 [ 443.793711][ T9] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 443.796474][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.805159][ T9] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 443.939083][T21567] ip6_vti0 speed is unknown, defaulting to 1000 [ 444.063392][ T5846] usb 9-1: USB disconnect, device number 17 [ 444.327260][ T5748] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 444.647988][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.650852][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.901895][T21610] netlink: 'syz.5.6821': attribute type 1 has an invalid length. [ 445.904670][T21610] netlink: 'syz.5.6821': attribute type 2 has an invalid length. [ 446.403087][ T5847] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 446.563048][ T5847] usb 10-1: Using ep0 maxpacket: 32 [ 446.566312][ T5847] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 446.571034][ T5847] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 446.571049][ T5847] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 446.571060][ T5847] usb 10-1: Product: syz [ 446.571068][ T5847] usb 10-1: Manufacturer: syz [ 446.571076][ T5847] usb 10-1: SerialNumber: syz [ 446.575265][ T5847] usb 10-1: config 0 descriptor?? [ 446.578336][T21624] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 446.600481][ T5847] hub 10-1:0.0: bad descriptor, ignoring hub [ 446.600497][ T5847] hub 10-1:0.0: probe with driver hub failed with error -5 [ 447.150985][T21645] ip6_vti0 speed is unknown, defaulting to 1000 [ 447.391341][T21663] loop8: detected capacity change from 0 to 8 [ 447.395962][T21663] Dev loop8: unable to read RDB block 8 [ 447.398491][T21663] loop8: unable to read partition table [ 447.401061][T21663] loop8: partition table beyond EOD, truncated [ 447.406448][T21663] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 447.493911][T21624] usb 10-1: reset high-speed USB device number 4 using dummy_hcd [ 447.646884][T21624] usb 10-1: device firmware changed [ 447.654377][ T5846] usb 10-1: USB disconnect, device number 4 [ 447.793084][ T5846] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 447.943689][ T5846] usb 10-1: Using ep0 maxpacket: 32 [ 447.947616][ T5846] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 447.955308][ T5846] usb 10-1: string descriptor 0 read error: -22 [ 447.958155][ T5846] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 447.962419][ T5846] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 448.014436][ T5846] usb 10-1: config 0 descriptor?? [ 448.018763][T21634] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 448.024448][ T5846] hub 10-1:0.0: bad descriptor, ignoring hub [ 448.031970][ T5846] hub 10-1:0.0: probe with driver hub failed with error -5 [ 448.149543][T21671] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.305283][T21671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.317718][T21671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.353213][ T9] usb 10-1: USB disconnect, device number 5 [ 448.500318][ T6405] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.509815][ T6405] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.519168][ T1186] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.524998][ T1186] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.637557][ T5748] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 449.159364][T21720] Invalid ELF header magic: != ELF [ 449.196480][T21721] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.301940][T21721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.318132][T21721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.359317][T21721] veth1_macvtap: left allmulticast mode [ 449.406623][T21721] hsr0: left allmulticast mode [ 449.408911][T21721] hsr_slave_0: left allmulticast mode [ 449.411159][T21721] hsr_slave_1: left allmulticast mode [ 449.463332][ T1186] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.467435][ T1186] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.471444][ T1186] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 47783 - 0 [ 449.474915][ T1186] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.477755][ T1186] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.480529][ T1186] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 47783 - 0 [ 449.484168][ T1186] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.487364][ T1186] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.490636][ T1186] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 47783 - 0 [ 449.590543][ T1186] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.613470][ T1186] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.617439][ T1186] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 47783 - 0 [ 450.179103][T21765] syzkaller1: entered promiscuous mode [ 450.181643][T21765] syzkaller1: entered allmulticast mode [ 450.355734][T21774] geneve2: entered promiscuous mode [ 450.429294][T21778] serio: Serial port ptm0 [ 450.660418][T21793] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 451.814834][T21825] ip6_vti0 speed is unknown, defaulting to 1000 [ 452.347799][T21836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6912'. [ 452.514225][T21844] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 452.883454][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 453.043351][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 453.046585][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.050200][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.053700][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 453.057743][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 453.061117][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.064287][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 453.068355][ T9] usb 9-1: config 0 descriptor?? [ 453.233424][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 453.238982][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 453.247088][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 453.250822][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 453.255476][ T10] usb 5-1: Product: syz [ 453.257369][ T10] usb 5-1: Manufacturer: syz [ 453.259375][ T10] usb 5-1: SerialNumber: syz [ 453.281104][ T10] usb 5-1: config 0 descriptor?? [ 453.287789][T21854] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 453.311569][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 453.314267][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 453.518759][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 453.521554][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 453.526086][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 453.528570][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 453.531073][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 453.533764][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 453.536147][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 453.538440][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 453.540890][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 453.543742][ T9] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 453.546957][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 453.557079][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.000F/input/input50 [ 453.574860][ T9] microsoft 0003:045E:07DA.000F: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 453.719257][ T843] usb 9-1: USB disconnect, device number 18 [ 453.923545][ T5128] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 454.075480][ T5128] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.079514][ T5128] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.085339][ T5128] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.088961][ T5128] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.235065][T21854] usb 5-1: reset high-speed USB device number 36 using dummy_hcd [ 454.302303][ T5128] usb 10-1: GET_CAPABILITIES returned 0 [ 454.305180][ T5128] usbtmc 10-1:16.0: can't read capabilities [ 454.384936][T21854] usb 5-1: device firmware changed [ 454.390493][ T10] usb 5-1: USB disconnect, device number 36 [ 454.503426][ T5846] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 454.510509][ T5128] usb 10-1: USB disconnect, device number 6 [ 454.523182][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 454.654339][ T5846] usb 9-1: Using ep0 maxpacket: 16 [ 454.666756][ T5846] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 454.672257][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.676041][ T5846] usb 9-1: Product: syz [ 454.677783][ T5846] usb 9-1: Manufacturer: syz [ 454.679745][ T5846] usb 9-1: SerialNumber: syz [ 454.683601][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 454.685612][ T5846] usb 9-1: config 0 descriptor?? [ 454.687894][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 454.695571][ T10] usb 5-1: string descriptor 0 read error: -22 [ 454.698336][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 454.702106][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 454.708336][ T10] usb 5-1: config 0 descriptor?? [ 454.711485][T21876] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 454.715805][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 454.718377][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 455.033325][T20751] usb 5-1: USB disconnect, device number 37 [ 455.124029][ T5846] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 455.130207][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 455.135430][ T5846] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 455.142649][ T5846] usb 9-1: media controller created [ 455.152666][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.533780][ T5169] block nbd0: Possible stuck request ffff888028105080: control (read@0,1024B). Runtime 330 seconds [ 455.538405][ T5169] block nbd0: Possible stuck request ffff888028105240: control (read@1024,1024B). Runtime 330 seconds [ 455.543486][ T5169] block nbd0: Possible stuck request ffff888028105400: control (read@2048,1024B). Runtime 330 seconds [ 455.547992][ T5169] block nbd0: Possible stuck request ffff8880281055c0: control (read@3072,1024B). Runtime 330 seconds [ 455.706640][T21888] dtv5100: wlen = 0, aborting. [ 455.708415][ T5846] zl10353_read_register: readreg error (reg=127, ret==0) [ 455.711263][ T5846] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 455.714995][ T5846] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 455.718796][ T5846] usb 9-1: USB disconnect, device number 19 [ 455.748216][ T5846] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 456.216080][T21922] netem: change failed [ 456.386000][T21929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6952'. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x15e000) [ 457.314451][T21919] syz.0.6949 (21919) used greatest stack depth: 18312 bytes left [ 457.446192][ T41] INFO: task udevd:7968 blocked in I/O wait for more than 143 seconds. [ 457.449266][ T41] Tainted: G L syzkaller #0 [ 457.453897][ T41] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.457781][ T41] task:udevd state:D stack:23528 pid:7968 tgid:7968 ppid:5151 task_flags:0x400140 flags:0x00080002 [ 457.462812][ T41] Call Trace: [ 457.467288][ T41] [ 457.469161][ T41] __schedule+0x1295/0x67a0 [ 457.471173][ T41] ? __pfx___schedule+0x10/0x10 [ 457.480400][ T41] ? find_held_lock+0x2b/0x80 [ 457.482418][ T41] ? schedule+0x2bf/0x390 [ 457.486876][ T41] schedule+0xdd/0x390 [ 457.493130][ T41] io_schedule+0x8a/0xf0 [ 457.494805][ T41] folio_wait_bit_common+0x414/0xa70 [ 457.496748][ T41] ? folio_wait_bit_common+0x2a0/0xa70 [ 457.498764][ T41] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 457.501253][ T41] ? __pfx_wake_page_function+0x10/0x10 [ 457.503632][ T41] ? __filemap_get_folio_mpol+0x3ba/0xe70 [ 457.505853][ T41] do_read_cache_folio+0x3bc/0x6b0 [ 457.508007][ T41] ? __pfx_blkdev_read_folio+0x10/0x10 [ 457.510949][ T41] read_part_sector+0xd1/0x370 [ 457.513556][ T41] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 457.517514][T21972] Invalid ELF header len 8 [ 457.519484][ T41] adfspart_check_POWERTEC+0x8a/0x630 [ 457.521776][ T41] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 457.527363][ T41] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 457.531944][ T41] bdev_disk_changed+0x7a3/0x1250 [ 457.535060][ T41] ? nbd_open+0x320/0x700 [ 457.536956][ T41] ? __pfx_bdev_disk_changed+0x10/0x10 [ 457.542101][ T41] blkdev_get_whole+0x187/0x290 [ 457.546486][ T41] bdev_open+0x2c7/0xe40 [ 457.548289][ T41] blkdev_open+0x34e/0x4f0 [ 457.553037][ T41] do_dentry_open+0x6d8/0x1660 [ 457.555003][ T41] ? __pfx_blkdev_open+0x10/0x10 [ 457.557082][ T41] vfs_open+0x82/0x3f0 [ 457.558730][ T41] path_openat+0x208c/0x31a0 [ 457.560409][ T41] ? __pfx_path_openat+0x10/0x10 [ 457.562030][ T41] do_file_open+0x20e/0x430 [ 457.563671][ T41] ? __pfx_do_file_open+0x10/0x10 [ 457.565479][ T41] ? alloc_fd+0x476/0x790 [ 457.567206][ T41] ? do_getname+0x191/0x390 [ 457.568889][ T41] do_sys_openat2+0x10d/0x1e0 [ 457.570670][ T41] ? __pfx_do_sys_openat2+0x10/0x10 [ 457.572583][ T41] ? __sys_recvmsg+0x18c/0x220 [ 457.574694][ T41] ? __pfx___sys_recvmsg+0x10/0x10 [ 457.576623][ T41] __x64_sys_openat+0x12d/0x210 [ 457.578402][ T41] ? __pfx___x64_sys_openat+0x10/0x10 [ 457.580134][ T41] ? rcu_is_watching+0x12/0xc0 [ 457.581719][ T41] do_syscall_64+0x10b/0x830 [ 457.583325][ T41] ? clear_bhb_loop+0x40/0x90 [ 457.584863][ T41] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.586762][ T41] RIP: 0033:0x7f5a7eea7407 [ 457.588215][ T41] RSP: 002b:00007ffd5457e960 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 457.591508][ T41] RAX: ffffffffffffffda RBX: 00007f5a7f585880 RCX: 00007f5a7eea7407 [ 457.594674][ T41] RDX: 00000000000a0800 RSI: 0000564a94e373d0 RDI: ffffffffffffff9c [ 457.597779][ T41] RBP: 0000564a94e2d910 R08: 0000000000000000 R09: 0000000000000000 [ 457.600934][ T41] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564a94e41fa0 [ 457.604103][ T41] R13: 0000564a94e3b190 R14: 0000000000000000 R15: 0000564a94e41fa0 [ 457.607049][ T41] [ 457.608300][ T41] [ 457.608300][ T41] Showing all locks held in the system: [ 457.611363][ T41] 1 lock held by khungtaskd/41: [ 457.613245][ T41] #0: ffffffff8e7e5420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 457.616714][ T41] 3 locks held by kworker/u32:2/46: [ 457.618399][ T41] 4 locks held by kworker/u32:3/60: [ 457.620082][ T41] 3 locks held by kworker/u32:10/3531: [ 457.621806][ T41] 1 lock held by udevd/5151: [ 457.623355][ T41] #0: ffff888028b46a98 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 457.626350][ T41] 2 locks held by getty/5545: [ 457.627889][ T41] #0: ffff888029ab90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 457.630864][ T41] #1: ffffc9000019b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 457.634045][ T41] 1 lock held by sshd-session/5652: [ 457.635666][ T41] #0: ffff888013678e70 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x83f/0x2e90 [ 457.638821][ T41] 1 lock held by udevd/7968: [ 457.640238][ T41] #0: ffff8880280aa350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 457.643100][ T41] 1 lock held by udevd/10626: [ 457.644517][ T41] #0: ffff8880280ae350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 457.647372][ T41] 2 locks held by syz.5.6968/21971: [ 457.648977][ T41] [ 457.649775][ T41] ============================================= [ 457.649775][ T41] [ 457.652308][ T41] NMI backtrace for cpu 2 [ 457.652320][ T41] CPU: 2 UID: 0 PID: 41 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 457.652336][ T41] Tainted: [L]=SOFTLOCKUP [ 457.652340][ T41] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.652346][ T41] Call Trace: [ 457.652351][ T41] [ 457.652355][ T41] dump_stack_lvl+0x100/0x190 [ 457.652370][ T41] nmi_cpu_backtrace.cold+0x12d/0x151 [ 457.652384][ T41] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 457.652398][ T41] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 457.652415][ T41] sys_info+0x141/0x190 [ 457.652428][ T41] watchdog+0xcb1/0x1030 [ 457.652448][ T41] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 457.652467][ T41] ? __pfx_watchdog+0x10/0x10 [ 457.652484][ T41] ? __kthread_parkme+0x18c/0x230 [ 457.652501][ T41] ? kthread+0x13a/0x450 [ 457.652511][ T41] ? __pfx_watchdog+0x10/0x10 [ 457.652526][ T41] kthread+0x370/0x450 [ 457.652535][ T41] ? __pfx_kthread+0x10/0x10 [ 457.652545][ T41] ret_from_fork+0x72b/0xd50 [ 457.652570][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 457.652583][ T41] ? __switch_to+0x800/0x1100 [ 457.652600][ T41] ? __pfx_kthread+0x10/0x10 [ 457.652611][ T41] ret_from_fork_asm+0x1a/0x30 [ 457.652632][ T41] [ 457.652637][ T41] Sending NMI from CPU 2 to CPUs 0-1,3: [ 457.656783][ T1127] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 457.657228][ C0] NMI backtrace for cpu 0 [ 457.657241][ C0] CPU: 0 UID: 0 PID: 21954 Comm: syz.0.6963 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.657260][ C0] Tainted: [L]=SOFTLOCKUP [ 457.657264][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.657272][ C0] RIP: 0010:write_comp_data+0x3a/0x90 [ 457.657292][ C0] Code: 65 48 8b 3d 90 eb 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 80 f6 83 09 8b 87 d4 16 00 00 85 c0 74 f1 <8b> 87 b0 16 00 00 83 f8 03 75 e6 48 8b 87 b8 16 00 00 8b bf b4 16 [ 457.657305][ C0] RSP: 0018:ffffc90003b0f4d8 EFLAGS: 00000246 [ 457.657316][ C0] RAX: 0000000000000001 RBX: 0000000000000036 RCX: ffffffff825d7772 [ 457.657324][ C0] RDX: 0000000000000036 RSI: 0000000000000125 RDI: ffff88804ad10000 [ 457.657332][ C0] RBP: 0000000000000125 R08: 0000000000000004 R09: 0000000000000125 [ 457.657340][ C0] R10: 0000000000000036 R11: 0000000000000000 R12: dffffc0000000000 [ 457.657347][ C0] R13: ffff88805eb07000 R14: 0000000000000000 R15: ffff88805eb07010 [ 457.657355][ C0] FS: 0000000000000000(0000) GS:ffff888097171000(0000) knlGS:0000000000000000 [ 457.657382][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 457.657391][ C0] CR2: 00000000f73c52f0 CR3: 000000000e596000 CR4: 0000000000352ef0 [ 457.657399][ C0] Call Trace: [ 457.657403][ C0] [ 457.657408][ C0] tlb_flush_rmap_batch+0x142/0x1e0 [ 457.657430][ C0] tlb_flush_rmaps+0xa9/0x100 [ 457.657448][ C0] __zap_vma_range+0x24a7/0x4a30 [ 457.657472][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 457.657489][ C0] ? find_held_lock+0x2b/0x80 [ 457.657509][ C0] unmap_vmas+0x299/0x5f0 [ 457.657525][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 457.657540][ C0] ? mas_next_slot+0x10a3/0x1960 [ 457.657561][ C0] exit_mmap+0x1ef/0xa10 [ 457.657577][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 457.657593][ C0] ? trace_contention_end+0x122/0x170 [ 457.657607][ C0] ? uprobe_clear_state+0x5f/0x260 [ 457.657620][ C0] ? uprobe_clear_state+0x5f/0x260 [ 457.657635][ C0] ? __lock_acquire+0x4a5/0x2630 [ 457.657652][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 457.657671][ C0] __mmput+0x12a/0x410 [ 457.657699][ C0] mmput+0x67/0x80 [ 457.657714][ C0] do_exit+0x8b2/0x2af0 [ 457.657733][ C0] ? __pfx___might_resched+0x10/0x10 [ 457.657750][ C0] ? __pfx_do_exit+0x10/0x10 [ 457.657768][ C0] ? do_raw_spin_lock+0x128/0x260 [ 457.657782][ C0] ? find_held_lock+0x2b/0x80 [ 457.657797][ C0] ? get_signal+0x7e5/0x2210 [ 457.657814][ C0] do_group_exit+0xd5/0x2a0 [ 457.657826][ C0] get_signal+0x20ff/0x2210 [ 457.657842][ C0] ? kick_process+0xf0/0x1a0 [ 457.657857][ C0] ? __pfx_get_signal+0x10/0x10 [ 457.657873][ C0] ? __pfx_vfs_read+0x10/0x10 [ 457.657891][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 457.657911][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 457.657932][ C0] ? fput+0xd9/0x100 [ 457.657948][ C0] ? rcu_is_watching+0x12/0xc0 [ 457.657966][ C0] exit_to_user_mode_loop+0x8b/0x4f0 [ 457.657980][ C0] ? rcu_is_watching+0x12/0xc0 [ 457.657995][ C0] do_int80_emulation+0x58b/0x700 [ 457.658010][ C0] asm_int80_emulation+0x1a/0x20 [ 457.658024][ C0] RIP: 0023:0xf71861ab [ 457.658033][ C0] Code: Unable to access opcode bytes at 0xf7186181. [ 457.658039][ C0] RSP: 002b:00000000f543d42c EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 457.658050][ C0] RAX: fffffffffffffe00 RBX: 0000000000000004 RCX: 0000000080000200 [ 457.658058][ C0] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.658065][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.658072][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 457.658080][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.658093][ C0] [ 457.658098][ C3] NMI backtrace for cpu 3 [ 457.658110][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.658129][ C3] Tainted: [L]=SOFTLOCKUP [ 457.658134][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.658142][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 457.658166][ C3] Code: 56 94 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 bf 22 00 fb f4 7c 42 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 457.658180][ C3] RSP: 0000:ffffc9000048fdf0 EFLAGS: 00000202 [ 457.658191][ C3] RAX: 000000000029fdcb RBX: ffff88801c3ca500 RCX: ffffffff8b88d0b5 [ 457.658216][ C3] RDX: 0000000000000000 RSI: ffffffff8df2060a RDI: ffffffff8c1c4300 [ 457.658227][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10056a67b5 [ 457.658237][ C3] R10: ffff88802b533dab R11: 0000000000000000 R12: 0000000000000003 [ 457.658245][ C3] R13: ffffed10038794a0 R14: 0000000000000003 R15: ffffffff90d81650 [ 457.658256][ C3] FS: 0000000000000000(0000) GS:ffff888097471000(0000) knlGS:0000000000000000 [ 457.658285][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.658298][ C3] CR2: 00000000f71b7810 CR3: 0000000059d2f000 CR4: 0000000000352ef0 [ 457.658307][ C3] Call Trace: [ 457.658312][ C3] [ 457.658317][ C3] default_idle+0x9/0x10 [ 457.658333][ C3] default_idle_call+0x6c/0xb0 [ 457.658348][ C3] do_idle+0x464/0x590 [ 457.658369][ C3] ? __pfx_do_idle+0x10/0x10 [ 457.658388][ C3] ? finish_task_switch.isra.0+0x152/0x1010 [ 457.658413][ C3] cpu_startup_entry+0x4f/0x60 [ 457.658433][ C3] start_secondary+0x21d/0x2d0 [ 457.658450][ C3] ? __pfx_start_secondary+0x10/0x10 [ 457.658468][ C3] common_startup_64+0x13e/0x148 [ 457.658495][ C3] [ 457.658501][ C1] NMI backtrace for cpu 1 [ 457.658516][ C1] CPU: 1 UID: 0 PID: 1127 Comm: scsi_eh_0 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.658537][ C1] Tainted: [L]=SOFTLOCKUP [ 457.658542][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.658551][ C1] RIP: 0010:__lock_acquire+0x85f/0x2630 [ 457.658570][ C1] Code: b7 c0 48 0f a3 05 21 e1 2d 14 0f 83 b2 09 00 00 49 bc eb 83 b5 80 46 86 c8 61 4d 0f af e7 49 c1 ec 2d 4a 8b 04 e5 20 4c 4f 97 <4e> 8d 34 e5 20 4c 4f 97 48 85 c0 74 1f 48 83 e8 08 48 85 c0 74 16 [ 457.658584][ C1] RSP: 0018:ffffc90006e97168 EFLAGS: 00000803 [ 457.658597][ C1] RAX: ffffffff941608a8 RBX: ffff888029670c08 RCX: 0000000000000003 [ 457.658607][ C1] RDX: 00000000214a2198 RSI: 0000000008972626 RDI: 00000000a5910211 [ 457.658616][ C1] RBP: ffff888029670000 R08: 000000009cf9dbeb R09: 000000000000000e [ 457.658626][ C1] R10: ffffffff8e6f1560 R11: 0000000000000000 R12: 0000000000062e9e [ 457.658635][ C1] R13: 000000000000000e R14: 0000000000000000 R15: 158bb98b214a2198 [ 457.658645][ C1] FS: 0000000000000000(0000) GS:ffff888097271000(0000) knlGS:0000000000000000 [ 457.658677][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.658688][ C1] CR2: 0000000033115ff8 CR3: 0000000054c89000 CR4: 0000000000352ef0 [ 457.658698][ C1] Call Trace: [ 457.658704][ C1] [ 457.658716][ C1] lock_acquire+0x1b1/0x370 [ 457.658731][ C1] ? console_lock_spinning_enable+0x61/0x80 [ 457.658752][ C1] ? console_lock_spinning_enable+0x4a/0x80 [ 457.658774][ C1] console_lock_spinning_enable+0x72/0x80 [ 457.658794][ C1] ? console_lock_spinning_enable+0x61/0x80 [ 457.658813][ C1] console_flush_one_record+0x739/0xe50 [ 457.658836][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 457.658859][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 457.658883][ C1] console_unlock+0x103/0x260 [ 457.658902][ C1] ? __pfx_console_unlock+0x10/0x10 [ 457.658921][ C1] ? lock_acquire+0xc0/0x370 [ 457.658939][ C1] vprintk_emit+0x407/0x6b0 [ 457.658959][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 457.658979][ C1] ? __pfx_ata_exec_internal+0x10/0x10 [ 457.658997][ C1] _printk+0xcf/0x110 [ 457.659012][ C1] ? __pfx__printk+0x10/0x10 [ 457.659032][ C1] ata_read_log_page.cold+0xae/0xc1 [ 457.659094][ C1] ? __pfx_ata_read_log_page+0x10/0x10 [ 457.659119][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.659143][ C1] ? arch_stack_walk+0x94/0xf0 [ 457.659164][ C1] ata_eh_analyze_ncq_error+0x2a2/0xde0 [ 457.659187][ C1] ? __pfx_ata_eh_analyze_ncq_error+0x10/0x10 [ 457.659211][ C1] ? ahci_scr_read+0x1a9/0x2d0 [ 457.659226][ C1] ? __pfx_ahci_scr_read+0x10/0x10 [ 457.659243][ C1] ata_eh_link_autopsy+0x274/0x3260 [ 457.659260][ C1] ? do_raw_spin_lock+0x128/0x260 [ 457.659281][ C1] ? __pfx_ata_eh_link_autopsy+0x10/0x10 [ 457.659301][ C1] ? __lock_acquire+0x4a5/0x2630 [ 457.659317][ C1] ata_eh_autopsy+0x37/0x3a0 [ 457.659333][ C1] sata_pmp_error_handler+0xa0/0x1380 [ 457.659353][ C1] ? do_raw_spin_lock+0x128/0x260 [ 457.659370][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 457.659389][ C1] ? __lock_acquire+0x4a5/0x2630 [ 457.659404][ C1] ? __pfx_sata_pmp_error_handler+0x10/0x10 [ 457.659423][ C1] ? mark_held_locks+0x40/0x70 [ 457.659437][ C1] ? __msecs_to_jiffies+0x46/0x50 [ 457.659458][ C1] ? ata_wait_register+0x142/0x190 [ 457.659477][ C1] ? __pfx_ata_wait_register+0x10/0x10 [ 457.659500][ C1] ahci_error_handler+0x10c/0x1f0 [ 457.659515][ C1] ata_scsi_port_error_handler+0xdc4/0x1a90 [ 457.659537][ C1] ata_scsi_error+0x24b/0x3b0 [ 457.659554][ C1] ? __pfx_ata_scsi_error+0x10/0x10 [ 457.659569][ C1] ? scsi_host_busy+0x7c/0xb0 [ 457.659588][ C1] ? __pfx_scsi_host_busy+0x10/0x10 [ 457.659608][ C1] ? __pfx_ata_scsi_error+0x10/0x10 [ 457.659623][ C1] scsi_error_handler+0x2fb/0x1500 [ 457.659646][ C1] ? scsi_error_handler+0x79/0x1500 [ 457.659670][ C1] ? __kthread_parkme+0xbb/0x230 [ 457.659691][ C1] ? rcu_is_watching+0x12/0xc0 [ 457.659710][ C1] ? __pfx_scsi_error_handler+0x10/0x10 [ 457.659733][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 457.659756][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 457.659772][ C1] ? __kthread_parkme+0x18c/0x230 [ 457.659793][ C1] ? kthread+0x13a/0x450 [ 457.659806][ C1] ? __pfx_scsi_error_handler+0x10/0x10 [ 457.659829][ C1] kthread+0x370/0x450 [ 457.659843][ C1] ? __pfx_kthread+0x10/0x10 [ 457.659858][ C1] ret_from_fork+0x72b/0xd50 [ 457.659875][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 457.659892][ C1] ? __switch_to+0x800/0x1100 [ 457.659913][ C1] ? __pfx_kthread+0x10/0x10 [ 457.659929][ C1] ret_from_fork_asm+0x1a/0x30 [ 457.659956][ C1] [ 457.660208][ T41] Kernel panic - not syncing: hung_task: blocked tasks [ 457.660219][ T41] CPU: 2 UID: 0 PID: 41 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 457.660234][ T41] Tainted: [L]=SOFTLOCKUP [ 457.660238][ T41] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.660245][ T41] Call Trace: [ 457.660249][ T41] [ 457.660254][ T41] dump_stack_lvl+0x100/0x190 [ 457.660268][ T41] vpanic+0x552/0x970 [ 457.660280][ T41] ? __pfx_vpanic+0x10/0x10 [ 457.660291][ T41] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 457.660306][ T41] ? rcu_is_watching+0x12/0xc0 [ 457.660320][ T41] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 457.660337][ T41] panic+0xd1/0xe0 [ 457.660347][ T41] ? __pfx_panic+0x10/0x10 [ 457.660359][ T41] ? wq_watchdog_touch+0xec/0x1a0 [ 457.660377][ T41] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 457.660392][ T41] ? watchdog.cold+0x1ec/0x234 [ 457.660405][ T41] ? watchdog+0xcc1/0x1030 [ 457.660422][ T41] watchdog.cold+0x1fd/0x234 [ 457.660438][ T41] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 457.660456][ T41] ? __pfx_watchdog+0x10/0x10 [ 457.660472][ T41] ? __kthread_parkme+0x18c/0x230 [ 457.660490][ T41] ? kthread+0x13a/0x450 [ 457.660499][ T41] ? __pfx_watchdog+0x10/0x10 [ 457.660514][ T41] kthread+0x370/0x450 [ 457.660524][ T41] ? __pfx_kthread+0x10/0x10 [ 457.660535][ T41] ret_from_fork+0x72b/0xd50 [ 457.660548][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 457.660562][ T41] ? __switch_to+0x800/0x1100 [ 457.660577][ T41] ? __pfx_kthread+0x10/0x10 [ 457.660588][ T41] ret_from_fork_asm+0x1a/0x30 [ 457.660610][ T41] [ 457.662104][ T41] Kernel Offset: disabled VM DIAGNOSIS: 20:15:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857c83a5 RDI=ffffffff9b468820 RBP=ffffffff9b4687e0 RSP=ffffc9000068f8a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000074 R14=0000000000000010 R15=ffffffff857c8340 RIP=ffffffff857c83cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097171000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003310eff8 CR3=0000000057a36000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffffd4000371a89 RBX=ffffc9000662f820 RCX=ffffea0001b8d440 RDX=dffffc0000000000 RSI=ffffffff8259001a RDI=ffffea0001b8d448 RBP=0000000000000042 RSP=ffffc9000662f548 R8 =0000000000000006 R9 =ffffffffffffffff R10=000000000006e200 R11=0000000000000000 R12=0000000000000001 R13=ffffea0001b8d308 R14=ffff888059700df0 R15=800000006e351025 RIP=ffffffff8259004c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097271000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f702c5d0 CR3=0000000052893000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff96152080 RBX=00000000000003e9 RCX=ffffffff96192ca0 RDX=0000000000000000 RSI=ffffc900042e6cf0 RDI=ffffffff97bf2ee8 RBP=0000000000000030 RSP=ffffc900042e6c48 R8 =ffffffff961dc2d8 R9 =00000000000003d7 R10=ffffc900042e6de0 R11=0000000000000000 R12=ffffffff81e391a0 R13=ffffc900042e6cf0 R14=ffffffff81e39fb0 R15=ffffffff97be4708 RIP=ffffffff81e3a9da RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f420ab41300 ffffffff 00c00000 GS =0000 ffff888097371000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a98ac2af40 CR3=000000004d5ca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=637852e7fa92c512 46b422f76b6d3589 637852e7fa92c512 46b422f76b6d3589 637852e7fa92c512 46b422f76b6d3589 637852e7fa92c512 46b422f76b6d3589 ZMM18=06c285886058691d b09bafed47d271d7 06c285886058691d b09bafed47d271d7 06c285886058691d b09bafed47d271d7 06c285886058691d b09bafed47d271d7 ZMM19=c028000000000000 0000000000000004 c028000000000000 0000000000000003 c028000000000000 0000000000000002 c028000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65642f01ffffffff ffffffffe5081380 0340800800010000 0008060480e20800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1e08000b9b808008 0000020c0143c400 0400208408000180 0201c7080008004d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc00646968752f76 65642f01ffffffff ffffffffeb080180 030a0000009f0000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060480e208001e08 000b9b8080080000 020c0143c4000400 2084080001800201 ZMM25=914407d4914407d4 914407d4914407d4 914407d4914407d4 914407d4914407d4 914407d4914407d4 914407d4914407d4 914407d4914407d4 914407d4914407d4 ZMM26=5f1238f65f1238f6 5f1238f65f1238f6 5f1238f65f1238f6 5f1238f65f1238f6 5f1238f65f1238f6 5f1238f65f1238f6 5f1238f65f1238f6 5f1238f65f1238f6 ZMM27=7216645072166450 7216645072166450 7216645072166450 7216645072166450 7216645072166450 7216645072166450 7216645072166450 7216645072166450 ZMM28=000001e0000001df 000001de000001dd 000001dc000001db 000001da000001d9 000001d8000001d7 000001d6000001d5 000001d4000001d3 000001d2000001d1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0337000003370000 0337000003370000 0337000003370000 0337000003370000 0337000003370000 0337000003370000 0337000003370000 0337000003370000 info registers vcpu 3 CPU#3 RAX=ffffffff979f2828 RBX=000000000000000e RCX=000000000000000f RDX=ffffffff961237f8 RSI=000000000000000f RDI=ffffffff97975858 RBP=0000000000000030 RSP=ffffc900005df518 R8 =ffffffff96123828 R9 =0000000000000002 R10=ffffc900005df6b0 R11=0000000000000000 R12=ffffffff81e391a0 R13=ffffc900005df5c0 R14=ffffffff81e39fb0 R15=ffffffff97975858 RIP=ffffffff81e3aa77 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097471000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002e520ff8 CR3=000000000e596000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ad28ab7c517b312f a359b6bc60add365 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 39f1322357b9d20f 68c8f42d1f274320 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c60c81f6b9c849b 6e81855de2b5ef51 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 68dd2faae81457f5 db22d44580d7420a ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000dc0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000116 29e19ad22a826abe ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011600000116 965ffaaa50d634a9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000029753a2e 00db4949265ac7cc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 eacd1e90ed1e6d5b 00000116007f57f9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 27ec14816a7096ae 57a7a5ca8403eeb1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 27db038aad332279 0ccd0bd18f3d1d67 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000