last executing test programs: 11m9.229093886s ago: executing program 32 (id=921): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000850) 10m30.90836502s ago: executing program 33 (id=1558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x24, r1, 0x1, 0x70bd26, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}, 0x1, 0x0, 0x0, 0x24d41b6036a153c7}, 0x4) 10m24.155696706s ago: executing program 34 (id=1780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000880)) 8m16.097712711s ago: executing program 35 (id=3688): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) getdents(r0, &(0x7f0000000200)=""/213, 0xd5) 4m31.31214748s ago: executing program 36 (id=7037): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) 4m30.2933146s ago: executing program 37 (id=7062): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x79) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 4m1.808080349s ago: executing program 38 (id=7524): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x4, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x2, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) 4m0.553551096s ago: executing program 6 (id=7542): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000140)={0x21000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4m0.288921276s ago: executing program 6 (id=7543): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x109882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) 4m0.152441532s ago: executing program 6 (id=7544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/20, 0x14}], 0x2f, 0x0, 0x10000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 3m59.739914166s ago: executing program 6 (id=7547): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x18d883, 0x0) 3m59.643812688s ago: executing program 6 (id=7548): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {0x1, 0x8001, 0x97}, 0x35, [0x1dc, 0xd409, 0xffff, 0x4, 0x7, 0x0, 0xffffffff, 0x127, 0x800, 0x3, 0x48a8, 0x5, 0x8001, 0x1c00, 0x0, 0x7ff, 0x1, 0xfffffffa, 0x29c, 0x9, 0x1000, 0x20001, 0x4, 0x6, 0xa, 0xfff, 0x8, 0x9, 0x406e6, 0x2, 0x9, 0x73f2, 0x4, 0x9, 0x3, 0x9a, 0x1, 0x200, 0xc8dc, 0x8c, 0x9, 0x80000000, 0x5, 0x40, 0x5, 0xcc, 0x3a6, 0x51b, 0x9, 0x6, 0x4, 0x6, 0x483, 0x2e2d, 0xa86, 0x10000, 0x1, 0x3, 0x80, 0x8001, 0x5, 0x3ff, 0x3ff, 0x5], [0x7, 0x0, 0xfffffff7, 0x7, 0xc, 0x1, 0x9, 0xbd, 0xe24d4cc6, 0x7fff, 0x5, 0x7, 0x100, 0x4, 0x8, 0x4, 0x40, 0x1000, 0x9, 0x6, 0x3, 0x7, 0x1, 0x9, 0x336, 0x4, 0x6, 0xaf5, 0x4, 0xffff6fa7, 0x7, 0x6, 0x7, 0x0, 0x3, 0x4, 0x0, 0xd, 0xfb0, 0x1ff, 0x4cb, 0x9, 0x3cd9, 0x12, 0x3, 0x6, 0x0, 0x8, 0x0, 0x15, 0x8000, 0x8, 0xe, 0x5, 0x10000, 0xffffffff, 0x5, 0x7, 0x6, 0x8, 0xf, 0x7ff, 0x8, 0x2], [0x8009, 0x1, 0x4, 0x30a, 0x9, 0x8, 0x20000002, 0x2, 0xffffffff, 0x2, 0x7f, 0x5, 0x6, 0x810, 0xfffffff7, 0x1, 0x1, 0xff, 0x2, 0x80000000, 0x4, 0x84, 0xfffffffe, 0x3ff, 0x8, 0x441, 0x0, 0x40000, 0x0, 0x5, 0x6, 0x95d, 0x4, 0xfc9, 0x7, 0x80000001, 0x0, 0x3, 0xdb3, 0xd, 0x4, 0x40, 0x4, 0x8, 0x8, 0x2, 0x2c2, 0x6, 0x80000001, 0x9, 0x2, 0x1d1, 0xf8b, 0x7800, 0x4, 0x7, 0x3, 0x5, 0x8, 0x8, 0x2, 0x3, 0x95f6, 0x7], [0xa, 0x7d0, 0x4, 0x7fff, 0x5, 0xaa, 0x6, 0xffffffff, 0x4, 0x1, 0x2, 0x1, 0x5, 0xa, 0x8, 0x8, 0x0, 0x401, 0x8, 0x4, 0x200, 0x10001, 0x83, 0x2, 0x6, 0x4, 0xc6, 0x0, 0x3, 0x1, 0x1, 0x4, 0x10001, 0x1000, 0x5, 0x4, 0x5, 0x9, 0x10, 0x7, 0xfad4, 0xffffffff, 0x8000, 0x5, 0xfff, 0x1ff, 0x9, 0x2, 0x5, 0xffffffff, 0x0, 0x5, 0xa102, 0x2, 0x10000, 0xfd43, 0x0, 0x400, 0x3f6cea4a, 0x1, 0x4, 0x4, 0x8, 0xa]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 3m59.373683748s ago: executing program 6 (id=7549): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000280)=' ', 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3m59.280326336s ago: executing program 39 (id=7549): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000280)=' ', 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3m27.512564306s ago: executing program 0 (id=7991): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000200)={0x0, 0x2710}, 0x10) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x12}, 0x10) listen(r0, 0xa) accept4$llc(r0, 0x0, 0x0, 0x0) 3m27.393198702s ago: executing program 0 (id=7992): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x42001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x2, 0x9, 0x0, 0x2, 0x2, 0x0, 0x10000, 0x400}, 0x10}, 0x1, 0x7}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 3m27.274523104s ago: executing program 0 (id=7994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m27.135281486s ago: executing program 0 (id=7996): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0\x00') 3m27.052957401s ago: executing program 0 (id=7998): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m26.903529812s ago: executing program 0 (id=7999): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 3m26.648614329s ago: executing program 40 (id=7999): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 2m38.59353714s ago: executing program 8 (id=8419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 2m38.392111579s ago: executing program 8 (id=8423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m38.10176196s ago: executing program 8 (id=8425): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 2m37.800970976s ago: executing program 8 (id=8430): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000240)='.\x00') 2m37.51434233s ago: executing program 8 (id=8437): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSMAXCID(r1, 0x80047458, 0x0) 2m37.314060927s ago: executing program 8 (id=8440): r0 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x7, 0x367}, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0xa, 0x13, r0, 0x8000000) syz_emit_ethernet(0x121, &(0x7f00000000c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, "b785c8", 0xeb, 0x5c, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@hopopts={0x87, 0x11, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x4, 0x4, [0x1, 0x70000000000, 0x5]}}, @calipso={0x7, 0x48, {0x1, 0x10, 0x40, 0x101, [0x2, 0x8001, 0x4, 0x8000000000000000, 0xfffffffffffffff7, 0x6, 0x7e59, 0x7fffffffffffffff]}}, @hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x8, {0x2, 0x0, 0x4, 0x101}}]}], "167399e4b727d0217a4cd394058f31953deece503aac58401013500feabeaa45144c8984ec08aa6109fc1a664ded7cf067d2e5bfe1512b10a9580dd66b26ca74aa142a8498c03b765800d105bc7cc12b3f0440"}}}}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 2m37.112016037s ago: executing program 41 (id=8440): r0 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x7, 0x367}, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0xa, 0x13, r0, 0x8000000) syz_emit_ethernet(0x121, &(0x7f00000000c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, "b785c8", 0xeb, 0x5c, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@hopopts={0x87, 0x11, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x4, 0x4, [0x1, 0x70000000000, 0x5]}}, @calipso={0x7, 0x48, {0x1, 0x10, 0x40, 0x101, [0x2, 0x8001, 0x4, 0x8000000000000000, 0xfffffffffffffff7, 0x6, 0x7e59, 0x7fffffffffffffff]}}, @hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x8, {0x2, 0x0, 0x4, 0x101}}]}], "167399e4b727d0217a4cd394058f31953deece503aac58401013500feabeaa45144c8984ec08aa6109fc1a664ded7cf067d2e5bfe1512b10a9580dd66b26ca74aa142a8498c03b765800d105bc7cc12b3f0440"}}}}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1m47.138075184s ago: executing program 1 (id=8907): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040), &(0x7f0000000140)=0x8) 1m46.08756795s ago: executing program 1 (id=8917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 1m45.943134343s ago: executing program 1 (id=8919): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mlock2(&(0x7f0000625000/0x3000)=nil, 0x3000, 0x0) 1m45.262719256s ago: executing program 1 (id=8927): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m45.166951413s ago: executing program 1 (id=8928): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000001c0)={0x1, 0x5453, 0xe, 0xffff, 0x0, 0x3, "e77a52b50e78f1e2cf9c2a2315bef545", 0x1, 0xa, 0x2, 0xb, 0x52, 0x6, 0x6b}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) 1m44.873992219s ago: executing program 1 (id=8931): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) 1m44.728402965s ago: executing program 42 (id=8931): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) 1m43.625633424s ago: executing program 3 (id=8943): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xf000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x72}, {0x0, 0xdddd8000, 0xb, 0xe, 0x0, 0x4, 0x3, 0x20, 0x7, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0xd, 0x0, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0xe000, 0x3000, 0x0, 0x4, 0xb, 0x8, 0x0, 0x0, 0x2b, 0xfc, 0x86, 0xfe}, {0x50000, 0x8000000, 0xd, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x26000}, {0x200000, 0xfffe}, 0x40008, 0x0, 0x0, 0x10, 0x1000000000000001, 0x0, 0x900, [0x0, 0x0, 0x2, 0x5]}) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 1m43.374734804s ago: executing program 3 (id=8945): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 1m43.165202894s ago: executing program 3 (id=8946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb16d7b27caf00", "8c76287d", "0500"}, 0x8b1a790331f765da) 1m43.113595498s ago: executing program 3 (id=8947): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) 1m42.611722956s ago: executing program 3 (id=8949): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='\x00\x00', 0x2) 1m41.974270336s ago: executing program 3 (id=8952): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000001fc0)={0x2020}, 0x2020) 1m26.844257887s ago: executing program 43 (id=8952): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000001fc0)={0x2020}, 0x2020) 45.567341817s ago: executing program 7 (id=9448): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 45.283363586s ago: executing program 7 (id=9450): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 44.846621794s ago: executing program 7 (id=9453): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) 43.880482923s ago: executing program 7 (id=9464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {0x2, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) 43.750409876s ago: executing program 7 (id=9467): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)="2a20000000df", 0x6) 43.611096824s ago: executing program 7 (id=9469): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) 28.382310923s ago: executing program 44 (id=9469): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) 5.966971313s ago: executing program 5 (id=9777): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0xfffffffffffffffc}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 4.571165806s ago: executing program 5 (id=9781): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 4.274869601s ago: executing program 5 (id=9783): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000840)="e55ada0a26b834f902c337d74e5e7238720efb7f8ec4d0727d476db4c872aa904427840eab3b36d1ed0bfbd7d7e69c6ddb2d8226eb56e81bf8ed7bc36a3881f90a5727aff51762c4b5d02893baa44c4fcebd4fc1c1136289c57bb6b9cac240b24cc199cc7edaeaad975966a70c5ca43e81ba4cc0232281bdf279b9b7425198f2bdba0dca17ac5f36268368465090c8440b9760a36dbd8c3c802ddfefc112ebc32dc8b4647b588da74e1bfa3832615c74474e82bf0b93b1de336368ffd64d25c5e41478", 0xc3}, {&(0x7f0000000a00)="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", 0xf3d}], 0x2) 2.914298023s ago: executing program 9 (id=9789): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) 2.397877052s ago: executing program 4 (id=9795): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x48010}}], 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 2.390825621s ago: executing program 9 (id=9796): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4084, 0xff4, 0x0, 0x0}, &(0x7f0000000000)=0x40) 2.297386727s ago: executing program 4 (id=9797): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x2], 0x0, 0x0, 0x1}}, 0x91) 2.205821167s ago: executing program 9 (id=9798): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x1}, 'syz0\x00', 0x7}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) 2.123125435s ago: executing program 9 (id=9799): pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff}, 0x800) io_setup(0x9, &(0x7f0000000240)=0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) close(0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x2, r2}]) 2.054077186s ago: executing program 4 (id=9801): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000100), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000340)=[0x346], &(0x7f0000000380)=[r2], &(0x7f00000001c0), 0x0, 0x2}) 1.930239918s ago: executing program 9 (id=9802): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) cachestat(r0, &(0x7f0000000040)={0x7e18, 0x10000}, &(0x7f0000000080), 0x0) 1.829504002s ago: executing program 4 (id=9803): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1f35, &(0x7f0000000040)={0x0, 0x2096c, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.800662482s ago: executing program 9 (id=9804): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) r1 = socket(0x2d, 0x2, 0x0) read(r1, &(0x7f0000000240)=""/77, 0x4d) 1.602726006s ago: executing program 4 (id=9806): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000600001000000000014"], 0x4a) 1.159650466s ago: executing program 4 (id=9807): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) 1.137684507s ago: executing program 5 (id=9808): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x5, 0x0, 0x1, 0x0, 0x800, 0x0, 0xffffe, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 910.456569ms ago: executing program 2 (id=9809): r0 = epoll_create(0x7) r1 = epoll_create(0x7) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0xc000001c}) 754.139264ms ago: executing program 5 (id=9810): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044004) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x400869ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 684.318519ms ago: executing program 2 (id=9811): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 592.481709ms ago: executing program 2 (id=9812): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) write(r0, &(0x7f0000000300)='v', 0x1) 461.524459ms ago: executing program 5 (id=9813): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) 406.222669ms ago: executing program 2 (id=9814): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) write(r0, &(0x7f00000000c0)="b0", 0x1) 172.548741ms ago: executing program 2 (id=9815): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80000006) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r1, 0x0, &(0x7f0000000240)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 0s ago: executing program 2 (id=9816): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kernel console output (not intermixed with test programs): 8] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.469139][T26032] usb 6-1: USB disconnect, device number 12 [ 648.152471][T26032] usb 10-1: USB disconnect, device number 6 [ 648.278421][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 648.278435][ T42] audit: type=1800 audit(1785871505.125:59385): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 648.433782][ T42] audit: type=1800 audit(1785871505.275:59386): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 648.478346][ T42] audit: type=1800 audit(1785871505.325:59387): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 648.564490][ T42] audit: type=1800 audit(1785871505.405:59388): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 648.648878][ T42] audit: type=1800 audit(1785871505.495:59389): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 648.670976][ T42] audit: type=1800 audit(1785871505.515:59390): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 648.713697][ T42] audit: type=1800 audit(1785871505.555:59391): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 648.806672][ T1347] net_ratelimit: 4 callbacks suppressed [ 648.806685][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.966125][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.973340][ T42] audit: type=1800 audit(1785871505.815:59392): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 649.288913][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.335351][ T42] audit: type=1800 audit(1785871506.175:59393): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 649.440777][T26781] type: 762539881 invalid [ 649.460765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.513377][ T42] audit: type=1800 audit(1785871506.355:59394): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 649.634506][T22528] usb 14-1: USB disconnect, device number 14 [ 650.005998][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.066730][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8809'. [ 650.079378][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8809'. [ 650.286080][T26819] loop7: detected capacity change from 0 to 7 [ 650.329004][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.350655][T26819] Dev loop7: unable to read RDB block 7 [ 650.355734][T26819] loop7: unable to read partition table [ 650.362324][T26819] loop7: partition table beyond EOD, truncated [ 650.366103][T26819] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 650.441075][T22756] buffer_io_error: 11 callbacks suppressed [ 650.441090][T22756] Buffer I/O error on dev loop7, logical block 0, async page read [ 650.450665][T22756] Buffer I/O error on dev loop7, logical block 0, async page read [ 650.462832][T22756] Buffer I/O error on dev loop7, logical block 0, async page read [ 650.928884][T23637] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 651.046030][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.093368][T23637] usb 10-1: Using ep0 maxpacket: 8 [ 651.098963][T23637] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 651.102048][T23637] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 651.127028][T23637] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 651.139964][T23637] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 651.149747][T23637] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.157548][T23637] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 651.161459][T23637] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.369295][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.530394][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.594277][T26846] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8825'. [ 651.599455][T26846] netlink: 72 bytes leftover after parsing attributes in process `syz.9.8825'. [ 651.612674][T26848] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 652.086390][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.140234][T26868] syzkaller1: entered promiscuous mode [ 652.142741][T26868] syzkaller1: entered allmulticast mode [ 652.418484][T26867] kvm_intel: VMCS ffff888053340000, last attempted VM-entry on CPU 2 [ 652.421169][T26867] kvm_intel: *** Guest State *** [ 652.422821][T26867] kvm_intel: CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffefff7 [ 652.443397][T26867] kvm_intel: CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=fffffffffffff871 [ 652.448535][T26867] kvm_intel: CR3 = 0x0000000000000000 [ 652.451972][T26867] kvm_intel: PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 652.454577][T26867] kvm_intel: PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 652.457572][T26867] kvm_intel: RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 652.483390][T26867] kvm_intel: RFLAGS=0x00000102 DR7 = 0x000000007ffffffd [ 652.492390][T26867] kvm_intel: Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 652.507218][T26867] kvm_intel: CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 652.511409][T26867] kvm_intel: DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 652.515730][T26867] kvm_intel: SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 652.522895][T26867] kvm_intel: ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 652.533490][T26867] kvm_intel: FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 652.548320][T26867] kvm_intel: GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 652.556516][T26867] kvm_intel: GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 652.564993][T26867] kvm_intel: LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 652.578967][T26867] kvm_intel: IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 652.586206][T26867] kvm_intel: TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 652.589286][T26867] kvm_intel: EFER= 0x0000000000000000 [ 652.598248][T26867] kvm_intel: PAT = 0x0007040600070406 [ 652.608012][T26867] kvm_intel: DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 652.611012][T26867] kvm_intel: Interruptibility = 00000000 ActivityState = 00000000 [ 652.617656][T26867] kvm_intel: *** Host State *** [ 652.620845][T26867] kvm_intel: RIP = 0xffffffff8bb823a0 RSP = 0xffffc9000568f870 [ 652.623368][T26867] kvm_intel: CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 652.626322][T26867] kvm_intel: FSBase=0000000000000000 GSBase=ffff888096ddf000 TRBase=fffffe0000003000 [ 652.629296][T26867] kvm_intel: GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 652.631773][T26867] kvm_intel: CR0=0000000080050033 CR3=000000006ac9e000 CR4=0000000000352ef0 [ 652.634673][T26867] kvm_intel: Sysenter RSP=fffffe0000003000 CS:RIP=0010:ffffffff81001df0 [ 652.642398][T26867] kvm_intel: EFER= 0x0000000000000d01 [ 652.644224][T26867] kvm_intel: PAT = 0x0407050600070106 [ 652.652540][T26867] kvm_intel: *** Control State *** [ 652.658740][T26867] kvm_intel: CPUBased=0xb5986dfa SecondaryExec=0x000000e2 TertiaryExec=0x0000000000000000 [ 652.661904][T26867] kvm_intel: PinBased=0x0000007f EntryControls=0000d1ff ExitControls=002befff [ 652.664758][T26867] kvm_intel: ExceptionBitmap=0006004a PFECmask=00000000 PFECmatch=00000000 [ 652.668939][T26867] kvm_intel: VMEntry: intr_info=80000603 errcode=00000000 ilen=00000000 [ 652.671602][T26867] kvm_intel: VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 652.674197][T26867] kvm_intel: reason=00000000 qualification=0000000000000000 [ 652.677006][T26867] kvm_intel: IDTVectoring: info=00000000 errcode=00000000 [ 652.685274][T26867] kvm_intel: TSC Offset = 0xfffffe73fb058bba [ 652.694490][T26867] kvm_intel: EPT pointer = 0x000000005058105e [ 652.703088][T26867] kvm_intel: Virtual processor ID = 0x0001 [ 653.417756][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 653.417770][ T42] audit: type=1800 audit(1785871510.255:59439): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 653.554574][ T42] audit: type=1800 audit(1785871510.395:59440): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 653.667490][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 653.668965][ T42] audit: type=1800 audit(1785871510.515:59441): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250413 res=0 errno=0 [ 653.670983][ T10] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 653.694536][ T1347] usb 10-1: USB disconnect, device number 7 [ 653.755020][ T42] audit: type=1800 audit(1785871510.595:59442): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 653.909246][ T42] audit: type=1800 audit(1785871510.755:59443): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 653.929255][ T10] net_ratelimit: 4 callbacks suppressed [ 653.929268][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.939825][ T42] audit: type=1800 audit(1785871510.755:59444): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250428 res=0 errno=0 [ 654.118800][ T42] audit: type=1800 audit(1785871510.965:59445): pid=26911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=250415 res=0 errno=0 [ 654.136598][ T42] audit: type=1800 audit(1785871510.975:59446): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 654.166057][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.181150][T23637] hid-generic 0006:0008:0001.0017: unknown main item tag 0x0 [ 654.183534][T23637] hid-generic 0006:0008:0001.0017: unknown main item tag 0x0 [ 654.188328][T23637] hid-generic 0006:0008:0001.0017: unknown main item tag 0x0 [ 654.191933][ T42] audit: type=1800 audit(1785871511.035:59447): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250442 res=0 errno=0 [ 654.201145][T23637] hid-generic 0006:0008:0001.0017: unknown main item tag 0x0 [ 654.205017][T23637] hid-generic 0006:0008:0001.0017: unknown main item tag 0x0 [ 654.212840][T23637] hid-generic 0006:0008:0001.0017: unknown main item tag 0x0 [ 654.218888][T23637] hid-generic 0006:0008:0001.0017: unknown main item tag 0x0 [ 654.226660][T23637] hid-generic 0006:0008:0001.0017: unknown main item tag 0x0 [ 654.253226][T23637] hid-generic 0006:0008:0001.0017: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 654.257442][ T42] audit: type=1800 audit(1785871511.105:59448): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250457 res=0 errno=0 [ 654.383560][T26923] fido_id[26923]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 654.488062][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.578050][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.580964][T26032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.206039][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.402795][T26946] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 655.532085][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.202716][T26032] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 656.206304][T26032] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 656.246044][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.571720][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.625126][T26979] fido_id[26979]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 657.081898][T26992] netlink: 204 bytes leftover after parsing attributes in process `syz.5.8889'. [ 657.286090][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.043605][T27014] syzkaller1: entered promiscuous mode [ 658.045469][T27014] syzkaller1: entered allmulticast mode [ 658.261625][T27026] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8906'. [ 658.271629][T27026] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.443141][T27026] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8906'. [ 658.466563][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 658.466576][ T42] audit: type=1800 audit(1785871515.305:59489): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 658.515309][T27031] loop8: detected capacity change from 0 to 7 [ 658.522056][T27031] Dev loop8: unable to read RDB block 7 [ 658.527573][T27031] loop8: unable to read partition table [ 658.541174][T27031] loop8: partition table beyond EOD, truncated [ 658.543234][T27031] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 658.586074][ T42] audit: type=1800 audit(1785871515.425:59490): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 658.718651][ T42] audit: type=1800 audit(1785871515.565:59491): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 658.739842][ T42] audit: type=1800 audit(1785871515.585:59492): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 658.867116][T27037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8911'. [ 659.001413][ T42] audit: type=1800 audit(1785871515.845:59493): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 659.080630][ T42] audit: type=1800 audit(1785871515.925:59494): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 659.129341][ T42] audit: type=1800 audit(1785871515.975:59495): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 659.142356][T27041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8913'. [ 659.147001][T27041] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8913'. [ 659.205014][ T42] audit: type=1800 audit(1785871516.045:59496): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 659.235671][ T42] audit: type=1800 audit(1785871516.045:59497): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251528 res=0 errno=0 [ 659.270123][ T42] audit: type=1800 audit(1785871516.115:59498): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 659.741119][T27054] netlink: 272 bytes leftover after parsing attributes in process `syz.5.8918'. [ 660.257054][T26032] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 660.438198][T26032] usb 10-1: Using ep0 maxpacket: 16 [ 660.448859][T26032] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 660.451656][T26032] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 660.454266][T26032] usb 10-1: Product: syz [ 660.455556][T26032] usb 10-1: Manufacturer: syz [ 660.461114][T26032] usb 10-1: SerialNumber: syz [ 660.708551][T24760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.713991][T24760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.919622][T24760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.944163][T24760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.034922][T21642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 661.044873][T21642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 661.064192][T21642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 661.071832][T21642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 661.082148][T21642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 661.174031][T24760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.179195][T24760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.311646][T24760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.323031][T24760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.500456][ T75] net_ratelimit: 3 callbacks suppressed [ 661.500468][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.508330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.917947][T24760] bridge_slave_1: left promiscuous mode [ 661.920148][T24760] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.935236][T24760] bridge_slave_0: left allmulticast mode [ 661.940053][T24760] bridge_slave_0: left promiscuous mode [ 661.942955][T24760] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.323921][T24760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.328982][T24760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.333082][T24760] bond0 (unregistering): Released all slaves [ 662.369237][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 662.521203][T24760] tipc: Disabling bearer [ 662.524950][T24760] tipc: Left network mode [ 663.063091][T24760] hsr_slave_0: left promiscuous mode [ 663.070049][T24760] hsr_slave_1: left promiscuous mode [ 663.075047][T24760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.078674][T26032] usb 10-1: USB disconnect, device number 8 [ 663.081671][T24760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.107906][T24760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.110350][T24760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.132196][ T5748] Bluetooth: hci0: command tx timeout [ 663.177929][T24760] veth1_macvtap: left promiscuous mode [ 663.188084][T24760] veth0_macvtap: left promiscuous mode [ 663.190073][T24760] veth1_vlan: left promiscuous mode [ 663.192326][T24760] veth0_vlan: left promiscuous mode [ 663.518667][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 663.518679][ T42] audit: type=1800 audit(1785871520.355:59552): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 664.000505][T24760] team0 (unregistering): Port device team_slave_1 removed [ 664.016197][T24760] team0 (unregistering): Port device team_slave_0 removed [ 664.381158][T27089] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.387992][T27089] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.394490][T27089] bridge_slave_0: entered allmulticast mode [ 664.403975][T27089] bridge_slave_0: entered promiscuous mode [ 664.415129][ T5452] 8021q: adding VLAN 0 to HW filter on device eth6 [ 664.477570][T27089] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.488078][T27089] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.497579][T27089] bridge_slave_1: entered allmulticast mode [ 664.514678][T27089] bridge_slave_1: entered promiscuous mode [ 664.631781][ T42] audit: type=1800 audit(1785871521.475:59553): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 664.652242][T27089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.668013][T27089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.729443][ T42] audit: type=1800 audit(1785871521.575:59554): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 664.753183][T27089] team0: Port device team_slave_0 added [ 664.767268][ T42] audit: type=1800 audit(1785871521.615:59555): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=251878 res=0 errno=0 [ 664.775731][T27089] team0: Port device team_slave_1 added [ 664.857402][T27089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.864723][T27089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.895237][T27089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.908843][T27089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.911101][T27089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.927657][T27089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.033112][T27089] hsr_slave_0: entered promiscuous mode [ 665.039410][T27089] hsr_slave_1: entered promiscuous mode [ 665.052819][T27089] debugfs: 'hsr0' already exists in 'hsr' [ 665.059789][ T42] audit: type=1800 audit(1785871521.895:59556): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 665.066189][T27089] Cannot create hsr debugfs directory [ 665.154175][ T42] audit: type=1800 audit(1785871521.995:59557): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 665.207364][ T5748] Bluetooth: hci0: command tx timeout [ 665.274720][ T42] audit: type=1800 audit(1785871522.115:59558): pid=27089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27371 res=0 errno=0 [ 665.313627][ T42] audit: type=1800 audit(1785871522.155:59559): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 665.416800][ T42] audit: type=1800 audit(1785871522.255:59560): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 665.563227][ T42] audit: type=1800 audit(1785871522.405:59561): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 665.687267][T27089] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.822605][ T5452] 8021q: adding VLAN 0 to HW filter on device eth7 [ 665.854917][T27089] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.010498][T27089] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.192735][T27089] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.782428][ T5452] 8021q: adding VLAN 0 to HW filter on device eth8 [ 667.035435][T27089] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 667.068559][T27089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.074840][T27089] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 667.109805][T27089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.118022][T27089] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 667.154813][T27089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.158249][T27089] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 667.171356][T27089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.286835][T27221] batadv_slave_1: entered promiscuous mode [ 667.287291][ T5748] Bluetooth: hci0: command tx timeout [ 667.310094][T27217] batadv_slave_1: left promiscuous mode [ 667.510707][T27089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.551795][T27089] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.569915][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.572852][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.593546][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.596396][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.020733][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.546880][T27244] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8978'. [ 668.593226][T27244] bond2: Invalid ad_actor_system MAC address. [ 668.601158][T27244] bond2: option ad_actor_system: invalid value (5) [ 668.643703][T27244] bond2 (unregistering): Released all slaves [ 668.660010][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 668.660022][ T42] audit: type=1800 audit(1785871525.505:59582): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 668.853943][ T42] audit: type=1800 audit(1785871525.695:59583): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 668.884739][ T42] audit: type=1800 audit(1785871525.725:59584): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 668.938648][T27089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.960399][ T42] audit: type=1800 audit(1785871525.805:59585): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 669.146967][ T42] audit: type=1800 audit(1785871525.995:59586): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 669.228060][T22528] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 669.323176][ T42] audit: type=1800 audit(1785871526.165:59587): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17039 res=0 errno=0 [ 669.366227][ T5748] Bluetooth: hci0: command tx timeout [ 669.387540][T27089] veth0_vlan: entered promiscuous mode [ 669.402960][T27089] veth1_vlan: entered promiscuous mode [ 669.409415][T22528] usb 10-1: not running at top speed; connect to a high speed hub [ 669.413001][T22528] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.423607][T22528] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 669.436494][T22528] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.457718][ T42] audit: type=1800 audit(1785871526.305:59588): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258788 res=0 errno=0 [ 669.480447][ T42] audit: type=1800 audit(1785871526.315:59589): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=258817 res=0 errno=0 [ 669.481594][T27089] veth0_macvtap: entered promiscuous mode [ 669.503927][T27089] veth1_macvtap: entered promiscuous mode [ 669.505460][ T42] audit: type=1800 audit(1785871526.315:59590): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=258795 res=0 errno=0 [ 669.525022][T27089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.537897][ T42] audit: type=1800 audit(1785871526.345:59591): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=258796 res=0 errno=0 [ 669.542230][T27089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.586025][T22532] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.589125][T22532] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.595338][T22532] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.636861][T22532] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.756440][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.775502][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.810372][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.812870][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.818606][T23638] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 671.006115][T23638] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.009566][T23638] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.013341][T23638] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 671.018507][T23638] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 671.036041][T23638] usb 12-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 671.039080][T23638] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.041655][T23638] usb 12-1: Product: syz [ 671.043010][T23638] usb 12-1: Manufacturer: syz [ 671.044683][T23638] usb 12-1: SerialNumber: syz [ 671.948472][ T5893] usb 10-1: USB disconnect, device number 9 [ 672.910243][T23637] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 673.058230][T23637] usb 10-1: Using ep0 maxpacket: 8 [ 673.076625][T23637] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 673.080278][T23637] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 673.084199][T23637] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.561320][ T5893] usb 12-1: USB disconnect, device number 16 [ 673.740093][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 673.740109][ T42] audit: type=1800 audit(1785871530.585:59623): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 674.283721][ T42] audit: type=1800 audit(1785871531.125:59624): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 674.390730][ T42] audit: type=1800 audit(1785871531.225:59625): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 674.480885][ T42] audit: type=1800 audit(1785871531.325:59626): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 674.767491][ T1347] usb 12-1: new full-speed USB device number 17 using dummy_hcd [ 674.923489][ T1347] usb 12-1: config 0 has an invalid interface number: 8 but max is 0 [ 674.926392][ T1347] usb 12-1: config 0 has no interface number 0 [ 674.928647][ T1347] usb 12-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 674.932681][ T1347] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 674.936270][ T1347] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 674.949437][ T1347] usb 12-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 674.952419][ T1347] usb 12-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 674.955151][ T1347] usb 12-1: Product: syz [ 674.956622][ T1347] usb 12-1: SerialNumber: syz [ 674.977323][ T42] audit: type=1800 audit(1785871531.815:59627): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259293 res=0 errno=0 [ 674.997944][ T42] audit: type=1800 audit(1785871531.835:59628): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=259324 res=0 errno=0 [ 675.020838][ T42] audit: type=1800 audit(1785871531.835:59629): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=259300 res=0 errno=0 [ 675.036277][ T42] audit: type=1800 audit(1785871531.835:59630): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=259301 res=0 errno=0 [ 675.082334][ T42] audit: type=1800 audit(1785871531.835:59631): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=259322 res=0 errno=0 [ 675.093754][ T42] audit: type=1800 audit(1785871531.835:59632): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=259302 res=0 errno=0 [ 675.706068][ T1347] usb 10-1: USB disconnect, device number 10 [ 677.592730][ T5836] usb 12-1: USB disconnect, device number 17 [ 677.613477][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.830910][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 678.830921][ T42] audit: type=1800 audit(1785871535.675:59642): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 678.890319][ T42] audit: type=1800 audit(1785871535.735:59643): pid=22757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259434 res=0 errno=0 [ 678.900741][T21642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 678.914970][ T42] audit: type=1800 audit(1785871535.745:59644): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259445 res=0 errno=0 [ 678.915103][T21642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 678.934398][T21642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 678.940549][T21642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 678.946203][T21642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 679.013039][ T42] audit: type=1800 audit(1785871535.845:59645): pid=22758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259475 res=0 errno=0 [ 679.019659][ T42] audit: type=1800 audit(1785871535.855:59646): pid=22757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259464 res=0 errno=0 [ 679.096581][ T42] audit: type=1800 audit(1785871535.935:59647): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 679.343234][ T42] audit: type=1800 audit(1785871536.185:59648): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 679.481590][ T42] audit: type=1800 audit(1785871536.315:59649): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 679.554032][T22532] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.559162][T22532] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.785519][ T42] audit: type=1800 audit(1785871536.625:59650): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 679.830097][ T42] audit: type=1800 audit(1785871536.645:59651): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259486 res=0 errno=0 [ 679.840723][T22532] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.849964][T22532] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.111799][T22532] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.139024][T22532] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.313910][T22532] bridge0: port 3(netdevsim0) entered disabled state [ 680.384801][T22532] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 680.398846][T22532] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 680.428507][T22532] bridge0: port 3(netdevsim0) entered disabled state [ 680.523657][T22532] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.536382][T22532] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.145334][T27441] Mass Storage Function, version: 2009/09/11 [ 681.152518][T27441] LUN: removable file: (no medium) [ 681.590214][T22532] bridge_slave_1: left allmulticast mode [ 681.602513][T22532] bridge_slave_1: left promiscuous mode [ 681.606080][T22532] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.614138][T22532] bridge_slave_0: left allmulticast mode [ 681.623981][T22532] bridge_slave_0: left promiscuous mode [ 681.626458][T22532] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.168895][T27471] netlink: 'syz.7.9048': attribute type 83 has an invalid length. [ 682.198573][T22532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.215342][T22532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.224468][T22532] bond0 (unregistering): Released all slaves [ 682.585218][T27393] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.587735][T27393] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.590648][T27393] bridge_slave_0: entered allmulticast mode [ 682.604911][T27393] bridge_slave_0: entered promiscuous mode [ 682.657314][T22532] hsr_slave_0: left promiscuous mode [ 682.662915][T22532] hsr_slave_1: left promiscuous mode [ 682.665193][T22532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.668453][T22532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.679497][T22532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.689807][T22532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.723242][T22532] veth1_macvtap: left promiscuous mode [ 682.729713][T22532] veth0_macvtap: left promiscuous mode [ 682.734146][T22532] veth1_vlan: left promiscuous mode [ 682.740419][T22532] veth0_vlan: left promiscuous mode [ 683.059321][T22532] team0 (unregistering): Port device team_slave_1 removed [ 683.067660][T22532] team0 (unregistering): Port device team_slave_0 removed [ 683.173007][T27393] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.177891][T27393] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.180475][T27393] bridge_slave_1: entered allmulticast mode [ 683.183355][T27393] bridge_slave_1: entered promiscuous mode [ 683.211063][ T5452] 8021q: adding VLAN 0 to HW filter on device eth9 [ 683.240943][T27393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.260992][T27393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.279761][T27393] team0: Port device team_slave_0 added [ 683.384076][T27393] team0: Port device team_slave_1 added [ 683.450837][T27393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.456142][T27393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.473590][T27393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.496392][T27393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.501711][T27393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.524907][T27393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.615602][T27393] hsr_slave_0: entered promiscuous mode [ 683.623167][T27393] hsr_slave_1: entered promiscuous mode [ 683.625508][T27393] debugfs: 'hsr0' already exists in 'hsr' [ 683.630969][T27393] Cannot create hsr debugfs directory [ 683.945596][T22532] IPVS: stop unused estimator thread 0... [ 683.952614][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 683.952625][ T42] audit: type=1800 audit(1785871540.795:59693): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 684.046750][ T42] audit: type=1800 audit(1785871540.895:59694): pid=27393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27371 res=0 errno=0 [ 684.349315][T27393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.358044][ T42] audit: type=1800 audit(1785871541.195:59695): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 684.377868][T27393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.426694][T27504] syzkaller1: entered promiscuous mode [ 684.431703][T27504] syzkaller1: entered allmulticast mode [ 684.439477][ T5452] 8021q: adding VLAN 0 to HW filter on device eth10 [ 684.448504][ T42] audit: type=1800 audit(1785871541.295:59696): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 684.493160][ T42] audit: type=1800 audit(1785871541.335:59697): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=261005 res=0 errno=0 [ 684.574440][ T42] audit: type=1800 audit(1785871541.415:59698): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 684.714045][T27393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.743942][T27393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.824206][T27526] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9065'. [ 684.911853][ T42] audit: type=1800 audit(1785871541.755:59699): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 685.053955][ T42] audit: type=1800 audit(1785871541.895:59700): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 685.088324][T27393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.091637][T27393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.129648][ T5452] 8021q: adding VLAN 0 to HW filter on device eth11 [ 685.142908][ T42] audit: type=1800 audit(1785871541.985:59701): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=261174 res=0 errno=0 [ 685.247806][T27393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.254664][T27393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.293470][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.295792][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.429476][ T42] audit: type=1800 audit(1785871542.275:59702): pid=27393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27370 res=0 errno=0 [ 685.858868][ T5452] 8021q: adding VLAN 0 to HW filter on device eth12 [ 686.191003][T27393] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 686.239705][T27393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 686.244714][T27393] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 686.261982][T27393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 686.271189][T27393] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 686.300053][T27393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 686.309229][T27393] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 686.329493][T27393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 686.404319][T27578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9079'. [ 686.456222][T27578] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9079'. [ 686.459179][T27578] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 686.534414][T27393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.559989][T27393] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.572042][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.574326][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.599167][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.601483][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.630124][T27588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9083'. [ 687.563569][T27393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.641720][T27393] veth0_vlan: entered promiscuous mode [ 687.662616][T27393] veth1_vlan: entered promiscuous mode [ 687.728531][T27393] veth0_macvtap: entered promiscuous mode [ 687.738474][T27393] veth1_macvtap: entered promiscuous mode [ 687.765462][T27393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.768771][T27617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9091'. [ 687.782997][T27393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.819364][T27621] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9091'. [ 687.847967][T22532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.932425][T22532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.962825][T22532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.009498][ T5594] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.115571][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.133187][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.152366][T27619] ./file0: Can't open blockdev [ 688.249983][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.253237][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.960238][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 688.960252][ T42] audit: type=1800 audit(1785871545.805:59731): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 689.013100][ T42] audit: type=1800 audit(1785871545.855:59732): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 689.103208][ T42] audit: type=1800 audit(1785871545.945:59733): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 689.243215][T27657] syzkaller1: entered promiscuous mode [ 689.259592][T27657] syzkaller1: entered allmulticast mode [ 689.273334][ T42] audit: type=1800 audit(1785871546.115:59734): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 689.490775][T27668] netlink: 83 bytes leftover after parsing attributes in process `syz.9.9111'. [ 689.525895][ T42] audit: type=1800 audit(1785871546.365:59735): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 689.603501][ T42] audit: type=1800 audit(1785871546.445:59736): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 689.649544][ T42] audit: type=1800 audit(1785871546.495:59737): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 689.751442][ T42] audit: type=1800 audit(1785871546.595:59738): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266662 res=0 errno=0 [ 689.778374][ T42] audit: type=1800 audit(1785871546.595:59739): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266677 res=0 errno=0 [ 689.924616][T27678] loop5: detected capacity change from 0 to 4095 [ 690.009076][T27678] Buffer I/O error on dev loop5, logical block 511, async page read [ 690.012746][ T42] audit: type=1800 audit(1785871546.855:59740): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 690.044609][T22756] Buffer I/O error on dev loop5, logical block 511, async page read [ 690.441533][T27692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9122'. [ 691.269312][T27707] 9p: Unknown uid 00000000004294967295 [ 693.722842][T27747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 693.724954][T27747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 693.727326][T27747] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 693.742207][T27747] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 693.755365][T27747] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 693.757509][T27747] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 693.769757][T27747] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 693.788275][T27747] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 693.792815][T27747] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 693.801190][T27747] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 694.015025][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 694.015037][ T42] audit: type=1800 audit(1785871550.855:59759): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 694.033711][ T42] audit: type=1800 audit(1785871550.875:59760): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34996 res=0 errno=0 [ 694.049137][ T42] audit: type=1800 audit(1785871550.895:59761): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 694.074921][ T42] audit: type=1800 audit(1785871550.895:59762): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35019 res=0 errno=0 [ 694.206509][ T42] audit: type=1800 audit(1785871551.055:59763): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 694.216253][ T1347] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 694.380976][ T1347] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 694.383731][ T1347] usb 7-1: config 0 has no interface number 0 [ 694.385680][ T1347] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 694.389258][ T1347] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 694.397519][ T1347] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 694.405023][ T42] audit: type=1800 audit(1785871551.245:59764): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 694.419165][ T1347] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 694.423372][ T1347] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 694.433072][ T1347] usb 7-1: Product: syz [ 694.434323][ T1347] usb 7-1: SerialNumber: syz [ 694.442016][ T42] audit: type=1800 audit(1785871551.285:59765): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 694.461479][ T42] audit: type=1800 audit(1785871551.305:59766): pid=22757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=267491 res=0 errno=0 [ 694.484880][ T42] audit: type=1800 audit(1785871551.305:59767): pid=22757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=267522 res=0 errno=0 [ 694.509971][ T42] audit: type=1800 audit(1785871551.305:59768): pid=22757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=267498 res=0 errno=0 [ 694.591975][T27777] syzkaller1: entered promiscuous mode [ 694.593816][T27777] syzkaller1: entered allmulticast mode [ 694.727441][ T1347] usb 12-1: new full-speed USB device number 18 using dummy_hcd [ 694.734973][T27782] overlayfs: failed to clone lowerpath [ 694.890858][ T1347] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.893993][ T1347] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 694.909524][ T1347] usb 12-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 694.912353][ T1347] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.914768][ T1347] usb 12-1: Product: syz [ 694.916227][ T1347] usb 12-1: Manufacturer: syz [ 694.918448][ T1347] usb 12-1: SerialNumber: syz [ 695.127977][T21642] Bluetooth: hci2: command 0x0c1a tx timeout [ 695.766280][T21642] Bluetooth: hci0: command 0x0c1a tx timeout [ 695.767920][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 695.852240][ T5748] Bluetooth: hci4: command 0x041b tx timeout [ 696.482671][T27809] overlayfs: failed to clone upperpath [ 696.525011][ T5833] usb 7-1: USB disconnect, device number 22 [ 697.170280][T27821] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9175'. [ 697.223100][T27826] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9175'. [ 697.463595][T27834] netlink: 'syz.9.9178': attribute type 23 has an invalid length. [ 697.496241][ T1347] usb 12-1: USB disconnect, device number 18 [ 697.627613][T23637] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 697.651166][T27814] block nbd5: shutting down sockets [ 697.777785][T23637] usb 7-1: Using ep0 maxpacket: 8 [ 697.787818][T23637] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.791276][T23637] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.794452][T23637] usb 7-1: config 0 interface 0 has no altsetting 0 [ 697.796910][T23637] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 697.816169][T23637] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.847149][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 697.849132][ T5748] Bluetooth: hci0: command 0x0c1a tx timeout [ 697.926402][ T5748] Bluetooth: hci4: command 0x041b tx timeout [ 699.013421][T27891] bond0: invalid NS target ff00:: specified for addition [ 699.020817][T27891] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 699.051785][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 699.051797][ T42] audit: type=1800 audit(1785871555.895:59813): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 699.169384][ T42] audit: type=1800 audit(1785871556.005:59814): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 699.417457][ T42] audit: type=1800 audit(1785871556.255:59815): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 699.477844][ T5836] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 699.638720][ T5836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.642366][ T5836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.645552][ T5836] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 699.649643][ T5836] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 699.666517][ T5836] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.693101][ T42] audit: type=1800 audit(1785871556.535:59816): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268054 res=0 errno=0 [ 699.701105][ T42] audit: type=1800 audit(1785871556.545:59817): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=268083 res=0 errno=0 [ 699.714493][ T42] audit: type=1800 audit(1785871556.545:59818): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=268061 res=0 errno=0 [ 699.730468][ T42] audit: type=1800 audit(1785871556.545:59819): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=268062 res=0 errno=0 [ 699.745880][ T42] audit: type=1800 audit(1785871556.545:59820): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=268063 res=0 errno=0 [ 699.926339][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 699.927698][T21642] Bluetooth: hci0: command 0x0c1a tx timeout [ 700.013426][ T5748] Bluetooth: hci4: command 0x041b tx timeout [ 700.068597][T27908] fuse: Bad value for 'fd' [ 700.326981][ T42] audit: type=1800 audit(1785871557.165:59821): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 700.358910][ T42] audit: type=1800 audit(1785871557.195:59822): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268119 res=0 errno=0 [ 700.422054][ T5893] usb 7-1: USB disconnect, device number 23 [ 700.865393][T27930] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9211'. [ 700.993606][T27937] lo: entered allmulticast mode [ 701.070023][T27936] lo: left allmulticast mode [ 701.227940][T27944] kvm_intel: VMCS ffff8880778e9000, last attempted VM-entry on CPU 0 [ 701.235715][T27944] kvm_intel: *** Guest State *** [ 701.247817][T27944] kvm_intel: CR0: actual=0x000000001df8fffa, shadow=0x000000005df8ffda, gh_mask=fffffffffffefff7 [ 701.258218][T27944] kvm_intel: CR4: actual=0x0000000000002160, shadow=0x0000000000000120, gh_mask=fffffffffffff871 [ 701.263962][T27944] kvm_intel: CR3 = 0x0000000000000000 [ 701.268500][T27944] kvm_intel: PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 701.273495][T27944] kvm_intel: PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 701.279773][T27944] kvm_intel: RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 701.286156][T27944] kvm_intel: RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 701.295723][T27944] kvm_intel: Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 701.306819][T27944] kvm_intel: CS: sel=0x0000, attr=0x14067, limit=0x0000e000, base=0x0000000000004000 [ 701.313529][T27944] kvm_intel: DS: sel=0x0003, attr=0x03015, limit=0x00009000, base=0x0000000000000002 [ 701.341020][T27944] kvm_intel: SS: sel=0x0000, attr=0x0b009, limit=0x00000001, base=0x00000000ffff1000 [ 701.356970][T27944] kvm_intel: ES: sel=0x000e, attr=0x1e091, limit=0x00001000, base=0x00000000eeee0000 [ 701.373789][T27944] kvm_intel: FS: sel=0x0009, attr=0x07085, limit=0x00000000, base=0x0000000000000001 [ 701.383232][T27944] kvm_intel: GS: sel=0x0003, attr=0x11025, limit=0xffff1000, base=0x000000000000d000 [ 701.387913][T27944] kvm_intel: GDTR: limit=0x00000009, base=0x00000000080a0000 [ 701.391123][T27944] kvm_intel: LDTR: sel=0x000a, attr=0x10060, limit=0x00010000, base=0x0000000000000000 [ 701.394330][T27944] kvm_intel: IDTR: limit=0x0000fffd, base=0x0000000000003000 [ 701.417651][T27944] kvm_intel: TR: sel=0x000a, attr=0x1c007, limit=0xdddd1000, base=0x00000000eeee8000 [ 701.423847][T27944] kvm_intel: EFER= 0x0000000000000000 [ 701.427665][T27944] kvm_intel: PAT = 0x0007040600070406 [ 701.432529][T27944] kvm_intel: DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 701.450211][T27944] kvm_intel: Interruptibility = 00000000 ActivityState = 00000000 [ 701.456027][T27944] kvm_intel: *** Host State *** [ 701.459894][T27944] kvm_intel: RIP = 0xffffffff8bb823a0 RSP = 0xffffc900057cf870 [ 701.462527][T27944] kvm_intel: CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 701.465187][T27944] kvm_intel: FSBase=0000000000000000 GSBase=ffff888096bdf000 TRBase=fffffe0000003000 [ 701.470144][T27944] kvm_intel: GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 701.472745][T27944] kvm_intel: CR0=0000000080050033 CR3=000000006f8dd000 CR4=0000000000352ef0 [ 701.475727][T27944] kvm_intel: Sysenter RSP=fffffe0000003000 CS:RIP=0010:ffffffff81001df0 [ 701.481196][T27944] kvm_intel: EFER= 0x0000000000000d01 [ 701.483119][T27944] kvm_intel: PAT = 0x0407050600070106 [ 701.484960][T27944] kvm_intel: *** Control State *** [ 701.487527][T27944] kvm_intel: CPUBased=0xb5986dfa SecondaryExec=0x000000e2 TertiaryExec=0x0000000000000000 [ 701.490876][T27944] kvm_intel: PinBased=0x0000007f EntryControls=0000d1ff ExitControls=002befff [ 701.494018][T27944] kvm_intel: ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 701.497766][T27944] kvm_intel: VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 701.500417][T27944] kvm_intel: VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 701.502969][T27944] kvm_intel: reason=80000021 qualification=0000000000000000 [ 701.505650][T27944] kvm_intel: IDTVectoring: info=00000000 errcode=00000000 [ 701.508352][T27944] kvm_intel: TSC Offset = 0xfffffe564b378594 [ 701.510242][T27944] kvm_intel: EPT pointer = 0x000000007648405e [ 701.512107][T27944] kvm_intel: Virtual processor ID = 0x0001 [ 701.745459][T27956] 9p: Bad value for 'rfdno' [ 701.910175][T27964] tipc: Started in network mode [ 701.911806][T27964] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 701.914270][T27964] tipc: Enabled bearer , priority 0 [ 702.087603][ T5748] Bluetooth: hci4: command 0x041b tx timeout [ 702.258584][ T5893] usb 10-1: USB disconnect, device number 11 [ 702.445621][T27979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9231'. [ 702.681000][T27991] netlink: 'syz.5.9238': attribute type 5 has an invalid length. [ 702.683503][T27991] netlink: 'syz.5.9238': attribute type 9 has an invalid length. [ 702.686421][T27991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9238'. [ 703.027720][ T1347] tipc: Node number set to 43690 [ 703.517452][ T1347] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 703.680444][ T1347] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.684018][ T1347] usb 10-1: config 0 interface 0 has no altsetting 0 [ 703.686741][ T1347] usb 10-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 703.689970][ T1347] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.166155][ T5748] Bluetooth: hci4: command 0x041b tx timeout [ 704.396049][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 704.396070][ T42] audit: type=1800 audit(1785871561.235:59849): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 704.472425][ T42] audit: type=1800 audit(1785871561.315:59850): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 704.583597][ T42] audit: type=1800 audit(1785871561.425:59851): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 704.749287][ T42] audit: type=1800 audit(1785871561.595:59852): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 704.837389][T28050] ip6erspan0: entered allmulticast mode [ 704.929887][ T42] audit: type=1800 audit(1785871561.775:59853): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 705.046714][ T5836] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 705.114412][ T42] audit: type=1800 audit(1785871561.955:59854): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 705.203290][ T42] audit: type=1800 audit(1785871562.045:59855): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 705.283163][ T42] audit: type=1800 audit(1785871562.125:59856): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 705.472471][ T42] audit: type=1800 audit(1785871562.315:59857): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 705.782304][ T42] audit: type=1800 audit(1785871562.625:59858): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 706.211519][ T1347] usb 10-1: USB disconnect, device number 12 [ 706.248291][ T5748] Bluetooth: hci4: command 0x041b tx timeout [ 706.954850][T28091] netlink: 'syz.9.9283': attribute type 11 has an invalid length. [ 707.119820][ T5836] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 707.310050][ T5836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.317406][ T5836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.343989][ T5836] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 707.374525][ T5836] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 707.397572][ T5836] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.458934][T28105] macsec1: entered allmulticast mode [ 707.477488][T28105] veth1_macvtap: entered allmulticast mode [ 707.498355][T28106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9289'. [ 707.603022][T28106] veth1_macvtap (unregistering): left allmulticast mode [ 707.808856][T28108] geneve2: entered promiscuous mode [ 707.839493][T28111] netlink: 7 bytes leftover after parsing attributes in process `syz.7.9292'. [ 708.326557][ T5748] Bluetooth: hci4: command 0x041b tx timeout [ 708.738871][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.827530][T28148] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 709.411551][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 709.411569][ T42] audit: type=1800 audit(1785871566.255:59883): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 709.634333][ T42] audit: type=1800 audit(1785871566.475:59884): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 709.674195][ T42] audit: type=1800 audit(1785871566.515:59885): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269030 res=0 errno=0 [ 709.777632][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.864272][ T5836] usb 10-1: USB disconnect, device number 13 [ 709.914503][ T42] audit: type=1800 audit(1785871566.755:59886): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 709.968797][ T42] audit: type=1800 audit(1785871566.815:59887): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 710.304875][ T42] audit: type=1800 audit(1785871567.145:59888): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 710.466375][ T42] audit: type=1800 audit(1785871567.305:59889): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 710.598648][ T42] audit: type=1800 audit(1785871567.445:59890): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 710.638464][T28202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9334'. [ 710.658652][ T42] audit: type=1800 audit(1785871567.505:59891): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 710.668390][T28202] netlink: 'syz.2.9334': attribute type 10 has an invalid length. [ 710.677887][T28202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9334'. [ 710.730088][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.808573][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.897304][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.930808][ T42] audit: type=1800 audit(1785871567.775:59892): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 711.527746][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.630747][T28234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 711.846709][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.385621][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.408908][T28266] overlayfs: failed to clone upperpath [ 713.386316][T23637] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 713.408600][T28290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9374'. [ 713.429992][T28290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9374'. [ 713.539106][T23637] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 713.545723][T23637] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 713.553678][T23637] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 713.562422][T23637] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 713.587620][T23637] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.769751][T23637] net_ratelimit: 7 callbacks suppressed [ 713.769765][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.927898][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.932661][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 714.932673][ T42] audit: type=1800 audit(1785871571.775:59926): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 714.981619][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.236094][ T5893] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 715.396233][ T5893] usb 10-1: Using ep0 maxpacket: 8 [ 715.400973][ T5893] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 715.405863][ T5893] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 715.414296][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.472138][ T42] audit: type=1800 audit(1785871572.315:59927): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270163 res=0 errno=0 [ 715.499671][ T42] audit: type=1800 audit(1785871572.345:59928): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=270192 res=0 errno=0 [ 715.541351][ T42] audit: type=1800 audit(1785871572.365:59929): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=270170 res=0 errno=0 [ 715.578939][ T42] audit: type=1800 audit(1785871572.365:59930): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=270171 res=0 errno=0 [ 715.597814][ T42] audit: type=1800 audit(1785871572.375:59931): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=270172 res=0 errno=0 [ 716.020227][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.174625][T23637] usb 7-1: USB disconnect, device number 24 [ 716.809422][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.047021][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.361614][T28374] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 717.480992][ T42] audit: type=1800 audit(1785871574.325:59932): pid=28376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9411" name="match_busid" dev="sysfs" ino=44480 res=0 errno=0 [ 717.993066][ T5893] usb 10-1: USB disconnect, device number 14 [ 718.037305][ T42] audit: type=1800 audit(1785871574.885:59933): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 718.087122][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.212894][T28400] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9421'. [ 718.378285][ T42] audit: type=1800 audit(1785871575.225:59934): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 718.412949][ T42] audit: type=1800 audit(1785871575.245:59935): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270228 res=0 errno=0 [ 718.597572][T28414] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9428'. [ 718.600943][T28414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9428'. [ 718.626094][T28414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9428'. [ 718.752628][T28429] 9pnet_virtio: no channels available for device 127.0.0.1 [ 719.082819][T28442] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 719.136783][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.850105][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.961322][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 719.961336][ T42] audit: type=1800 audit(1785871576.805:59942): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 720.176419][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.318732][ T42] audit: type=1800 audit(1785871577.165:59943): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 720.778793][ T42] audit: type=1800 audit(1785871577.605:59944): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 720.851423][T28478] fuse: fd is not a fuse device [ 720.856131][ T42] audit: type=1800 audit(1785871577.695:59945): pid=28479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9456" name="cluster_stack" dev="sysfs" ino=5894 res=0 errno=0 [ 720.875290][ T42] audit: type=1804 audit(1785871577.715:59946): pid=28478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.9455" name="file0" dev="tmpfs" ino=3379 res=1 errno=0 [ 720.994423][ T42] audit: type=1800 audit(1785871577.845:59947): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 721.001261][T28485] netlink: 100 bytes leftover after parsing attributes in process `syz.9.9458'. [ 721.074213][ T42] audit: type=1800 audit(1785871577.915:59948): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 721.142027][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.207262][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.430557][T28496] team0 (unregistering): Port device team_slave_0 removed [ 721.491776][T28496] team0 (unregistering): Port device team_slave_1 removed [ 721.696685][ T42] audit: type=1800 audit(1785871578.535:59949): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 721.743852][ T42] audit: type=1326 audit(1785871578.585:59950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.2.9465" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 722.182693][ T42] audit: type=1800 audit(1785871579.025:59951): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 722.247413][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.698893][T28532] ima: policy update failed [ 722.887583][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.286829][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.610785][T28560] syzkaller1: entered promiscuous mode [ 723.615678][T28560] syzkaller1: entered allmulticast mode [ 723.687352][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.337448][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.966825][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.973698][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.191639][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 725.191651][ T42] audit: type=1800 audit(1785871582.035:59962): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 725.377275][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.467498][T28596] fuse: fd is not a fuse device [ 725.914527][T28610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9510'. [ 725.930979][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.951254][ T42] audit: type=1800 audit(1785871582.795:59963): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 726.379573][ T42] audit: type=1800 audit(1785871583.225:59964): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 726.408400][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.478018][ T42] audit: type=1800 audit(1785871583.325:59965): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 726.688981][ T42] audit: type=1800 audit(1785871583.525:59966): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272130 res=0 errno=0 [ 726.711548][ T42] audit: type=1800 audit(1785871583.535:59967): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272145 res=0 errno=0 [ 726.734233][ T42] audit: type=1800 audit(1785871583.545:59968): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272160 res=0 errno=0 [ 726.763265][T28628] pim6reg1: entered promiscuous mode [ 726.771275][T28628] pim6reg1: entered allmulticast mode [ 727.168105][ T42] audit: type=1800 audit(1785871584.015:59969): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 727.330745][ T42] audit: type=1800 audit(1785871584.175:59970): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 727.372099][T28658] Invalid argument reading file caps for ./file0 [ 727.446386][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.496809][ T42] audit: type=1800 audit(1785871584.335:59971): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272179 res=0 errno=0 [ 728.498608][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.967007][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.446948][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.537292][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.704223][T28708] overlayfs: failed to clone upperpath [ 729.726220][ T5893] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 729.889326][ T5893] usb 7-1: Using ep0 maxpacket: 8 [ 729.895120][ T5893] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 729.901701][ T5893] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 729.907180][ T5893] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 729.918092][ T5893] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 729.921287][ T5893] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 729.933962][ T5893] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 729.949047][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.241842][T28716] netlink: 428 bytes leftover after parsing attributes in process `syz.9.9554'. [ 730.256714][T28716] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9554'. [ 730.348959][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 730.348971][ T42] audit: type=1800 audit(1785871587.195:59990): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 730.395069][ T42] audit: type=1800 audit(1785871587.235:59991): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272493 res=0 errno=0 [ 730.420754][ T42] audit: type=1800 audit(1785871587.265:59992): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 730.519067][ T42] audit: type=1800 audit(1785871587.365:59993): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 730.558745][ T42] audit: type=1800 audit(1785871587.405:59994): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272512 res=0 errno=0 [ 730.572856][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.788822][ T42] audit: type=1800 audit(1785871587.635:59995): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 731.105231][ T42] audit: type=1800 audit(1785871587.945:59996): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 731.606854][T26033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.628558][ T42] audit: type=1800 audit(1785871588.475:59997): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 731.784899][ T42] audit: type=1800 audit(1785871588.625:59998): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 732.488276][T23637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.515262][T26033] usb 7-1: USB disconnect, device number 25 [ 732.646784][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.738724][ T42] audit: type=1800 audit(1785871589.585:59999): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 733.116713][T28764] overlayfs: failed to clone upperpath [ 733.176796][ T1347] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 733.348229][ T1347] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 733.353703][ T1347] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 733.396259][ T1347] usb 10-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 733.405571][ T1347] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 733.411529][ T1347] usb 10-1: Product: syz [ 733.422208][ T1347] usb 10-1: Manufacturer: syz [ 733.698350][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.451106][T28797] netlink: 'syz.2.9587': attribute type 1 has an invalid length. [ 734.514617][T28797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 734.569339][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.727065][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.208237][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.375875][T28810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9591'. [ 735.527659][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.777261][T26033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.942073][ T1347] usb 10-1: USB disconnect, device number 15 [ 736.144382][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 736.144400][ T42] audit: type=1800 audit(1785871592.985:60009): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 736.627340][ T42] audit: type=1800 audit(1785871593.465:60010): pid=28828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9598" name="use" dev="configfs" ino=143489 res=0 errno=0 [ 736.662729][ T42] audit: type=1800 audit(1785871593.465:60011): pid=28828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9598" name="b_vendor_code" dev="configfs" ino=143490 res=0 errno=0 [ 736.715378][ T42] audit: type=1800 audit(1785871593.545:60012): pid=28832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9601" name="remove" dev="sysfs" ino=2739 res=0 errno=0 [ 736.758261][ T42] audit: type=1800 audit(1785871593.555:60013): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 736.791293][ T42] audit: type=1800 audit(1785871593.625:60014): pid=28835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9601" name="rescan" dev="sysfs" ino=820 res=0 errno=0 [ 736.818201][T26033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.149535][T28835] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 737.205327][T28835] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 737.212631][T28835] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 737.239840][T28835] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 737.251148][T28835] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 737.264742][T28835] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 737.294974][T28835] pci 0000:00:02.0: enabling Extended Tags [ 737.299712][T21642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 737.310883][ T42] audit: type=1800 audit(1785871594.155:60015): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273256 res=0 errno=0 [ 737.317187][T21642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 737.346072][ T42] audit: type=1800 audit(1785871594.155:60016): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273267 res=0 errno=0 [ 737.353500][T21642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 737.381044][ T42] audit: type=1800 audit(1785871594.225:60017): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273290 res=0 errno=0 [ 737.388019][T21642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 737.395475][T21642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 737.408662][T28835] pci 0000:00:02.0: Adding to iommu group 2 [ 737.440363][ T42] audit: type=1800 audit(1785871594.285:60018): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273370 res=0 errno=0 [ 737.511702][T28835] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 737.519784][T28835] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 737.528573][T28835] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 737.531001][T28835] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 737.544895][T28835] pci 0000:00:05.0: Adding to iommu group 5 [ 737.561602][T28835] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 737.567470][T28835] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 737.588615][T28835] pci 0000:00:1d.0: Adding to iommu group 7 [ 737.600073][T28835] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 737.603327][T28835] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 737.608430][T28835] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 737.613044][T28835] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 737.621702][T28835] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 737.631670][T28835] pci 0000:00:05.0: BAR 1 [mem 0x80084000-0x80084fff]: assigned [ 737.635555][T28835] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 737.639260][T28835] pci 0000:00:05.0: BAR 0 [io 0x2020-0x203f]: assigned [ 737.643010][T28835] pci 0000:00:1d.0: BAR 4 [io 0x2040-0x205f]: assigned [ 737.646400][T28835] pci 0000:00:04.0: PCI bridge to [bus 01] [ 737.648600][T28835] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 737.652446][T28835] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 737.655859][T28835] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 737.659261][ T1347] libceph: connect (1)[c::]:6789 error -101 [ 737.666389][ T1347] libceph: mon0 (1)[c::]:6789 connect error [ 737.727330][T28835] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 737.751036][T28848] ceph: No mds server is up or the cluster is laggy [ 737.848675][T26033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.869266][T28835] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 737.993834][ T5594] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.182977][T28835] e1000e 0000:00:02.0 (unnamed net_device) (uninitialized): removed PHC [ 738.295519][ T5594] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.515726][T28835] e1000e 0000:00:02.0: probe with driver e1000e failed with error -4 [ 738.567897][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.654059][ T5594] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.890587][T26033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.967520][ T5594] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.979068][T28883] sctp: [Deprecated]: syz.9.9617 (pid 28883) Use of int in max_burst socket option deprecated. [ 738.979068][T28883] Use struct sctp_assoc_value instead [ 739.212347][T28835] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 216145 usecs [ 739.406645][T28835] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 739.536766][T21642] Bluetooth: hci0: command tx timeout [ 739.623559][T28835] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 739.631627][T28835] uhci_hcd 0000:00:1d.0: detected 2 ports [ 739.669229][T28835] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002040 [ 739.690832][T26033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.736489][ T5594] bridge_slave_1: left allmulticast mode [ 739.738637][ T5594] bridge_slave_1: left promiscuous mode [ 739.744062][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.750108][T28835] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 739.754598][T28835] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 739.757887][T28835] usb usb2: Product: UHCI Host Controller [ 739.759757][T28835] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 739.761837][T28835] usb usb2: SerialNumber: 0000:00:1d.0 [ 739.806355][ T5594] bridge_slave_0: left allmulticast mode [ 739.814128][ T5594] bridge_slave_0: left promiscuous mode [ 739.816357][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.352913][T28910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9628'. [ 740.499547][ T5594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.516997][ T5594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.530973][ T5594] bond0 (unregistering): Released all slaves [ 740.736432][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 740.749171][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 740.843170][T28916] ceph: No mds server is up or the cluster is laggy [ 741.130715][T28929] 9p: Bad value for 'rfdno' [ 741.237173][ T1347] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 741.404481][ T1347] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 741.433435][ T1347] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 741.436779][ T1347] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 741.447688][ T1347] usb 10-1: Product: syz [ 741.449201][ T1347] usb 10-1: Manufacturer: syz [ 741.461326][ T1347] usb 10-1: SerialNumber: syz [ 741.473471][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 741.473484][ T42] audit: type=1800 audit(1785871598.315:60070): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=276313 res=0 errno=0 [ 741.492576][ T42] audit: type=1800 audit(1785871598.325:60071): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=276345 res=0 errno=0 [ 741.501792][ T5594] hsr_slave_0: left promiscuous mode [ 741.505291][ T5594] hsr_slave_1: left promiscuous mode [ 741.507644][ T5594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.513573][ T5594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.514448][ T42] audit: type=1800 audit(1785871598.325:60072): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=276320 res=0 errno=0 [ 741.524912][ T5594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.534523][ T5594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.539925][ T42] audit: type=1800 audit(1785871598.325:60073): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=276321 res=0 errno=0 [ 741.558852][ T42] audit: type=1800 audit(1785871598.325:60074): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=276342 res=0 errno=0 [ 741.579006][ T42] audit: type=1800 audit(1785871598.325:60075): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=276343 res=0 errno=0 [ 741.582822][ T5594] veth1_macvtap: left promiscuous mode [ 741.593083][ T5594] veth0_macvtap: left promiscuous mode [ 741.596148][ T42] audit: type=1800 audit(1785871598.325:60076): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=276322 res=0 errno=0 [ 741.598971][ T5594] veth1_vlan: left promiscuous mode [ 741.612944][T21642] Bluetooth: hci0: command tx timeout [ 741.619809][ T42] audit: type=1800 audit(1785871598.325:60077): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=276344 res=0 errno=0 [ 741.625640][ T5594] veth0_vlan: left promiscuous mode [ 742.112203][ T5594] team0 (unregistering): Port device team_slave_1 removed [ 742.132367][ T5594] team0 (unregistering): Port device team_slave_0 removed [ 742.514324][ T5452] 8021q: adding VLAN 0 to HW filter on device eth13 [ 742.619848][T28842] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.625071][T28842] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.633684][T28842] bridge_slave_0: entered allmulticast mode [ 742.639868][T28842] bridge_slave_0: entered promiscuous mode [ 742.667573][T28842] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.672069][T28842] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.676587][T28842] bridge_slave_1: entered allmulticast mode [ 742.689038][T28842] bridge_slave_1: entered promiscuous mode [ 742.772971][T28842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.801523][T28842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.843729][T28842] team0: Port device team_slave_0 added [ 742.853205][T28842] team0: Port device team_slave_1 added [ 742.942285][T28842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.954538][T28842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.994234][T28842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.009314][T28842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.012378][T28842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.031687][T28842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.147970][T28842] hsr_slave_0: entered promiscuous mode [ 743.168745][T28842] hsr_slave_1: entered promiscuous mode [ 743.187614][T28842] debugfs: 'hsr0' already exists in 'hsr' [ 743.196119][T28842] Cannot create hsr debugfs directory [ 743.451655][T28990] A link change request failed with some changes committed already. Interface gtp0 may have been left with an inconsistent configuration, please check. [ 743.498591][T28992] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 743.520356][ T5452] 8021q: adding VLAN 0 to HW filter on device eth14 [ 743.556025][ T42] audit: type=1800 audit(1785871600.395:60078): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=274895 res=0 errno=0 [ 743.669953][ T42] audit: type=1800 audit(1785871600.515:60079): pid=28842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27371 res=0 errno=0 [ 743.697253][T21642] Bluetooth: hci0: command tx timeout [ 743.976672][ T1347] usb 10-1: USB disconnect, device number 16 [ 744.353028][T28842] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.416129][T28842] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.593600][ T5452] 8021q: adding VLAN 0 to HW filter on device eth15 [ 744.861642][T28842] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.865693][T28842] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.105759][T28842] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.118361][T28842] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.425445][T28842] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.431075][T28842] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.550153][ T5452] 8021q: adding VLAN 0 to HW filter on device eth16 [ 745.776291][T21642] Bluetooth: hci0: command tx timeout [ 746.441170][T28842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 746.458723][T28842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.461576][T28842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 746.472452][T28842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.477850][T28842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 746.490618][T28842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 746.507096][T28842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 746.524706][T28842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.629186][T29041] gadgetfs: bound to dummy_udc driver [ 746.686969][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 746.686981][ T42] audit: type=1800 audit(1785871603.535:60089): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 746.706281][T28842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.737999][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.740137][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.768219][T28842] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.784807][T28973] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.787179][T28973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.810626][T28973] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.813062][T28973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.935252][ T42] audit: type=1800 audit(1785871603.775:60090): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 747.544869][T28842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.557937][ T42] audit: type=1800 audit(1785871604.395:60091): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 747.780904][T29074] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input56 [ 747.786202][ T42] audit: type=1800 audit(1785871604.625:60092): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=280174 res=0 errno=0 [ 747.797019][T29085] overlayfs: failed to clone lowerpath [ 747.876753][T29091] overlayfs: failed to clone lowerpath [ 747.982417][ T42] audit: type=1800 audit(1785871604.825:60093): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=280190 res=0 errno=0 [ 748.012964][ T42] audit: type=1800 audit(1785871604.835:60094): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=280193 res=0 errno=0 [ 748.045854][ T42] audit: type=1800 audit(1785871604.845:60096): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 748.074993][ T42] audit: type=1800 audit(1785871604.835:60095): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=280192 res=0 errno=0 [ 748.104962][ T42] audit: type=1800 audit(1785871604.845:60097): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=280191 res=0 errno=0 [ 748.134273][ T42] audit: type=1800 audit(1785871604.845:60098): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=280182 res=0 errno=0 [ 748.215478][T28842] veth0_vlan: entered promiscuous mode [ 748.248729][T28842] veth1_vlan: entered promiscuous mode [ 748.316963][T28842] veth0_macvtap: entered promiscuous mode [ 748.321876][T28842] veth1_macvtap: entered promiscuous mode [ 748.347681][T28842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.354446][T28842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.364821][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.367781][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.388111][T22532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.393948][T22532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.538283][T28973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.541637][T28973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.642042][T28951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.644447][T28951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.134307][T29130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9684'. [ 750.077092][T29156] kernel read not supported for file /cpuacct.usage_percpu (pid: 29156 comm: syz.4.9695) [ 750.156857][ T5833] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 750.309626][ T5833] usb 10-1: Using ep0 maxpacket: 8 [ 750.322000][ T5833] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 750.332605][ T5833] usb 10-1: config 0 has no interface number 0 [ 750.342332][ T5833] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 750.356838][ T5833] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 750.370559][ T5833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.218143][T23638] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 751.386628][T23638] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 751.389533][T23638] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 751.392946][T23638] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 751.404583][T23638] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 751.423503][T23638] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 751.469938][T23638] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 751.473115][T23638] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 751.495069][T23638] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 751.518641][T23638] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 751.534861][T23638] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 751.561032][T23638] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 751.563497][T23638] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 751.568331][T23638] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 751.575101][T23638] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 751.603919][T23638] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 751.625981][T23638] usb 7-1: string descriptor 0 read error: -22 [ 751.628066][T23638] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 751.631137][T23638] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.717549][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 751.717561][ T42] audit: type=1800 audit(1785871608.565:60143): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=280674 res=0 errno=0 [ 752.933451][ T42] audit: type=1800 audit(1785871609.775:60144): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 752.972575][ T5833] usb 10-1: USB disconnect, device number 17 [ 753.001166][T29187] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 753.008133][ T42] audit: type=1800 audit(1785871609.845:60145): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 753.029345][T29187] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 753.161225][ T42] audit: type=1800 audit(1785871610.005:60146): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 753.303078][ T42] audit: type=1800 audit(1785871610.145:60147): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=280817 res=0 errno=0 [ 753.681980][ T42] audit: type=1800 audit(1785871610.525:60148): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 753.716890][ T42] audit: type=1800 audit(1785871610.555:60149): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 753.807617][T29208] gadgetfs: bound to dummy_udc driver [ 753.858983][ T42] audit: type=1800 audit(1785871610.705:60150): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 753.911490][T29212] netlink: 'syz.9.9715': attribute type 1 has an invalid length. [ 753.933609][ T42] audit: type=1800 audit(1785871610.775:60151): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 753.989197][T29212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 753.998793][ T50] usb 7-1: USB disconnect, device number 26 [ 754.100760][ T42] audit: type=1800 audit(1785871610.945:60152): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 754.132087][T29219] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 754.222778][T29219] bond1: (slave lo): Enslaving as an active interface with an up link [ 754.239238][T29219] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 755.199738][T29259] input: syz1 as /devices/virtual/input/input57 [ 756.789597][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 756.789612][ T42] audit: type=1800 audit(1785871613.635:60189): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 757.016915][ T42] audit: type=1800 audit(1785871613.855:60190): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 757.051384][ T42] audit: type=1800 audit(1785871613.865:60191): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=282278 res=0 errno=0 [ 757.145863][ T42] audit: type=1800 audit(1785871613.985:60192): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 757.388048][ T42] audit: type=1800 audit(1785871614.235:60193): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 757.552674][ T42] audit: type=1800 audit(1785871614.395:60194): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 757.634604][ T42] audit: type=1800 audit(1785871614.475:60195): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 757.879013][ T42] audit: type=1800 audit(1785871614.715:60196): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 757.931371][ T42] audit: type=1800 audit(1785871614.775:60197): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 758.111653][T29335] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 758.193502][ T42] audit: type=1800 audit(1785871615.035:60198): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 758.930949][T29361] overlayfs: failed to clone upperpath [ 758.967309][T29371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9770'. [ 759.135845][T29377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9772'. [ 759.141690][T29377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9772'. [ 759.154232][T29375] bridge1: entered promiscuous mode [ 759.162530][T29375] bridge1: entered allmulticast mode [ 761.030852][T29409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9780'. [ 761.072837][T29409] hsr_slave_1 (unregistering): left promiscuous mode [ 761.280757][T29419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9784'. [ 761.808078][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 761.808090][ T42] audit: type=1800 audit(1785871618.655:60210): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 761.899199][ T42] audit: type=1800 audit(1785871618.745:60211): pid=29432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9786" name="driver_override" dev="sysfs" ino=5340 res=0 errno=0 [ 761.923225][ T42] audit: type=1800 audit(1785871618.765:60212): pid=29432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9786" name="bind" dev="sysfs" ino=47100 res=0 errno=0 [ 762.116549][ T42] audit: type=1800 audit(1785871618.955:60213): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=282526 res=0 errno=0 [ 762.143605][ T42] audit: type=1800 audit(1785871618.975:60214): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=282530 res=0 errno=0 [ 762.157920][T29432] vim2m pcspkr: Device registered as /dev/video103 [ 762.185104][ T42] audit: type=1800 audit(1785871619.025:60215): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=282542 res=0 errno=0 [ 762.641858][ T42] audit: type=1800 audit(1785871619.485:60216): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 762.753250][ T42] audit: type=1800 audit(1785871619.595:60217): pid=29455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9789" name="nullb0" dev="tmpfs" ino=2863 res=0 errno=0 [ 762.860980][ T42] audit: type=1800 audit(1785871619.705:60218): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 762.915546][ T42] audit: type=1800 audit(1785871619.755:60219): pid=29464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9793" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 763.052058][T29467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9794'. [ 763.205413][T29467] nbd: socks must be embedded in a SOCK_ITEM attr [ 764.245535][T22757] udevd[22757]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 764.451970][T29508] gadgetfs: bound to dummy_udc driver [ 764.472564][T29509] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 764.853365][T29509] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 5 [ 764.869535][T29509] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0 [ 764.952079][T29509] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 764.964250][T29509] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 764.973777][T29509] usb usb5: Product: USB/IP Virtual Host Controller [ 764.981102][T29509] usb usb5: Manufacturer: Linux syzkaller vhci_hcd [ 764.988131][T29509] usb usb5: SerialNumber: vhci_hcd.0 [ 765.264135][T29509] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 765.318377][T29509] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 37 [ 765.330431][T29509] usb usb37: We don't know the algorithms for LPM for this host, disabling LPM. [ 765.346861][T29509] usb usb37: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 7.02 [ 765.360327][T29509] usb usb37: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 765.372829][T29509] usb usb37: Product: USB/IP Virtual Host Controller [ 765.385350][T29509] usb usb37: Manufacturer: Linux syzkaller vhci_hcd [ 765.395199][T29509] usb usb37: SerialNumber: vhci_hcd.0 [ 765.438756][T29506] vhci_hcd vhci_hcd.0: remove, state 1 [ 765.451864][T29506] usb usb37: USB disconnect, device number 1 [ 765.699084][T29506] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 765.701732][ T13] vhci_hcd vhci_hcd.0: stop threads [ 765.703999][ T13] vhci_hcd vhci_hcd.0: release socket [ 765.712910][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 765.720606][T29506] vhci_hcd vhci_hcd.0: remove, state 1 [ 765.727413][ T13] ================================================================== [ 765.729969][ T13] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 765.732722][ T13] Read of size 1 at addr ffff888061c50478 by task kworker/u32:1/13 [ 765.736779][ T13] [ 765.738090][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 765.738118][ T13] Tainted: [L]=SOFTLOCKUP [ 765.738125][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 765.738137][ T13] Workqueue: usbip_event event_handler [ 765.738180][ T13] Call Trace: [ 765.738188][ T13] [ 765.738196][ T13] dump_stack_lvl+0x100/0x190 [ 765.738221][ T13] print_report+0x13d/0x4b0 [ 765.738247][ T13] ? __virt_addr_valid+0x239/0x430 [ 765.738270][ T13] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 765.738291][ T13] kasan_report+0xdf/0x1c0 [ 765.738319][ T13] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 765.738341][ T13] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 765.738361][ T13] __kasan_check_byte+0x36/0x50 [ 765.738390][ T13] lock_acquire+0x132/0x370 [ 765.738418][ T13] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 765.738437][ T13] ? _raw_spin_lock_irqsave+0x52/0x60 [ 765.738455][ T13] _raw_spin_lock_irqsave+0x3a/0x60 [ 765.738471][ T13] ? event_handler+0x21e/0x570 [ 765.738488][ T13] event_handler+0x21e/0x570 [ 765.738508][ T13] process_one_work+0xa23/0x1940 [ 765.738536][ T13] ? __pfx_process_one_work+0x10/0x10 [ 765.738561][ T13] ? __pfx_event_handler+0x10/0x10 [ 765.738580][ T13] worker_thread+0x5ef/0xe50 [ 765.738606][ T13] ? kthread+0x13a/0x450 [ 765.738628][ T13] ? __pfx_worker_thread+0x10/0x10 [ 765.738651][ T13] kthread+0x370/0x450 [ 765.738674][ T13] ? __pfx_kthread+0x10/0x10 [ 765.738697][ T13] ret_from_fork+0x72b/0xd50 [ 765.738721][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 765.738739][ T13] ? __switch_to+0x800/0x10f0 [ 765.738767][ T13] ? __pfx_kthread+0x10/0x10 [ 765.738790][ T13] ret_from_fork_asm+0x1a/0x30 [ 765.738820][ T13] [ 765.738826][ T13] [ 765.777379][T29506] usb usb5: USB disconnect, device number 1 [ 765.778469][ T13] Allocated by task 29509: [ 765.778483][ T13] kasan_save_stack+0x30/0x50 [ 765.778511][ T13] kasan_save_track+0x14/0x30 [ 765.811737][ T13] __kasan_kmalloc+0xaa/0xb0 [ 765.813639][ T13] __kmalloc_noprof+0x322/0x820 [ 765.815536][ T13] __usb_create_hcd+0x5e/0xac0 [ 765.817449][ T13] vhci_hcd_probe+0x1a5/0x4e0 [ 765.819402][ T13] platform_probe+0x106/0x1d0 [ 765.821107][ T13] really_probe+0x241/0xa60 [ 765.822905][ T13] __driver_probe_device+0x20e/0x450 [ 765.825024][ T13] device_driver_attach+0xd1/0x220 [ 765.827104][ T13] bind_store+0xf4/0x190 [ 765.828797][ T13] drv_attr_store+0x74/0xb0 [ 765.830584][ T13] sysfs_kf_write+0xf2/0x150 [ 765.832176][ T13] kernfs_fop_write_iter+0x3e0/0x5f0 [ 765.834363][ T13] vfs_write+0x6ac/0x1050 [ 765.835834][ T13] ksys_write+0x12a/0x250 [ 765.837305][ T13] __do_fast_syscall_32+0xe7/0x970 [ 765.839027][ T13] do_fast_syscall_32+0x32/0x70 [ 765.840602][ T13] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 765.842155][T29506] vhci_hcd vhci_hcd.0: USB bus 5 deregistered [ 765.842852][ T13] [ 765.842857][ T13] Freed by task 29506: [ 765.842864][ T13] kasan_save_stack+0x30/0x50 [ 765.842881][ T13] kasan_save_track+0x14/0x30 [ 765.850079][ T13] kasan_save_free_info+0x3b/0x70 [ 765.851666][ T13] __kasan_slab_free+0x5f/0x80 [ 765.853236][ T13] kfree+0x22b/0x6c0 [ 765.854507][ T13] usb_put_hcd+0x149/0x1f0 [ 765.855919][ T13] vhci_hcd_remove+0xb5/0x1b0 [ 765.857389][ T13] platform_remove+0x5f/0x80 [ 765.858843][ T13] device_remove+0xcb/0x180 [ 765.860284][ T13] device_release_driver_internal+0x44e/0x620 [ 765.862357][ T13] unbind_store+0xf8/0x110 [ 765.864136][ T13] drv_attr_store+0x74/0xb0 [ 765.865655][ T13] sysfs_kf_write+0xf2/0x150 [ 765.867303][ T13] kernfs_fop_write_iter+0x3e0/0x5f0 [ 765.868966][ T13] vfs_write+0x6ac/0x1050 [ 765.870339][ T13] ksys_write+0x12a/0x250 [ 765.871774][ T13] __do_fast_syscall_32+0xe7/0x970 [ 765.873611][ T13] do_fast_syscall_32+0x32/0x70 [ 765.875543][ T13] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 765.877582][ T13] [ 765.878575][ T13] Last potentially related work creation: [ 765.880599][ T13] kasan_save_stack+0x30/0x50 [ 765.882219][ T13] kasan_record_aux_stack+0xa7/0xc0 [ 765.883911][ T13] insert_work+0x36/0x230 [ 765.885590][ T13] __queue_work+0x9bc/0x12b0 [ 765.887316][ T13] queue_work_on+0x1a9/0x1e0 [ 765.888807][ T13] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 765.890470][ T13] usb_hcd_submit_urb+0xab7/0x2150 [ 765.892101][ T13] usb_submit_urb+0x827/0x19b0 [ 765.893566][ T13] usb_start_wait_urb+0x10e/0x580 [ 765.895042][ T13] usb_control_msg+0x328/0x4b0 [ 765.896574][ T13] usb_get_string+0xab/0x1a0 [ 765.898065][ T13] usb_string_sub+0x103/0x3b0 [ 765.899950][ T13] usb_string+0x2ff/0x570 [ 765.901719][ T13] usb_cache_string+0x7c/0x100 [ 765.903725][ T13] usb_new_device+0x239/0x7d0 [ 765.905674][ T13] register_root_hub+0x4e6/0x639 [ 765.907663][ T13] usb_add_hcd.cold+0xccd/0x1158 [ 765.909717][ T13] vhci_hcd_probe+0x1c2/0x4e0 [ 765.911668][ T13] platform_probe+0x106/0x1d0 [ 765.913349][ T13] really_probe+0x241/0xa60 [ 765.914773][ T13] __driver_probe_device+0x20e/0x450 [ 765.916436][ T13] device_driver_attach+0xd1/0x220 [ 765.918050][ T13] bind_store+0xf4/0x190 [ 765.919370][ T13] drv_attr_store+0x74/0xb0 [ 765.920762][ T13] sysfs_kf_write+0xf2/0x150 [ 765.922421][ T13] kernfs_fop_write_iter+0x3e0/0x5f0 [ 765.924183][ T13] vfs_write+0x6ac/0x1050 [ 765.925512][ T13] ksys_write+0x12a/0x250 [ 765.926868][ T13] __do_fast_syscall_32+0xe7/0x970 [ 765.928486][ T13] do_fast_syscall_32+0x32/0x70 [ 765.930024][ T13] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 765.932093][ T13] [ 765.932952][ T13] Second to last potentially related work creation: [ 765.935054][ T13] kasan_save_stack+0x30/0x50 [ 765.936539][ T13] kasan_record_aux_stack+0xa7/0xc0 [ 765.938292][ T13] insert_work+0x36/0x230 [ 765.939706][ T13] __queue_work+0x9bc/0x12b0 [ 765.941456][ T13] queue_work_on+0x1a9/0x1e0 [ 765.943263][ T13] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 765.945315][ T13] usb_hcd_submit_urb+0xab7/0x2150 [ 765.947352][ T13] usb_submit_urb+0x827/0x19b0 [ 765.949272][ T13] usb_start_wait_urb+0x10e/0x580 [ 765.951331][ T13] usb_control_msg+0x328/0x4b0 [ 765.953307][ T13] usb_get_string+0xab/0x1a0 [ 765.955208][ T13] usb_string_sub+0x103/0x3b0 [ 765.957192][ T13] usb_string+0x2ff/0x570 [ 765.958982][ T13] usb_cache_string+0x7c/0x100 [ 765.960951][ T13] usb_new_device+0x1d1/0x7d0 [ 765.962801][ T13] register_root_hub+0x4e6/0x639 [ 765.964836][ T13] usb_add_hcd.cold+0xccd/0x1158 [ 765.966709][ T13] vhci_hcd_probe+0x1c2/0x4e0 [ 765.968440][ T13] platform_probe+0x106/0x1d0 [ 765.969937][ T13] really_probe+0x241/0xa60 [ 765.971372][ T13] __driver_probe_device+0x20e/0x450 [ 765.973226][ T13] device_driver_attach+0xd1/0x220 [ 765.975157][ T13] bind_store+0xf4/0x190 [ 765.976501][ T13] drv_attr_store+0x74/0xb0 [ 765.978183][ T13] sysfs_kf_write+0xf2/0x150 [ 765.980032][ T13] kernfs_fop_write_iter+0x3e0/0x5f0 [ 765.981868][ T13] vfs_write+0x6ac/0x1050 [ 765.983444][ T13] ksys_write+0x12a/0x250 [ 765.985052][ T13] __do_fast_syscall_32+0xe7/0x970 [ 765.986920][ T13] do_fast_syscall_32+0x32/0x70 [ 765.988597][ T13] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 765.990867][ T13] [ 765.991682][ T13] The buggy address belongs to the object at ffff888061c50000 [ 765.991682][ T13] which belongs to the cache kmalloc-8k of size 8192 [ 765.996092][ T13] The buggy address is located 1144 bytes inside of [ 765.996092][ T13] freed 8192-byte region [ffff888061c50000, ffff888061c52000) [ 766.000691][ T13] [ 766.001664][ T13] The buggy address belongs to the physical page: [ 766.004004][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888061c54000 pfn:0x61c50 [ 766.007101][ T13] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 766.009711][ T13] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 766.012613][ T13] page_type: f5(slab) [ 766.014135][ T13] raw: 04fff00000000240 ffff88801bc43180 ffffea0001d31610 ffffea0001d3b210 [ 766.016824][ T13] raw: ffff888061c54000 0000000800020001 00000000f5000000 0000000000000000 [ 766.019421][ T13] head: 04fff00000000240 ffff88801bc43180 ffffea0001d31610 ffffea0001d3b210 [ 766.022124][ T13] head: ffff888061c54000 0000000800020001 00000000f5000000 0000000000000000 [ 766.025018][ T13] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 766.027950][ T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 766.030751][ T13] page dumped because: kasan: bad access detected [ 766.032822][ T13] page_owner tracks the page as allocated [ 766.034641][ T13] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 29429, tgid 29429 (cryptomgr_probe), ts 762003373375, free_ts 760561629681 [ 766.041335][ T13] post_alloc_hook+0xfd/0x120 [ 766.042824][ T13] get_page_from_freelist+0xf48/0x3530 [ 766.044564][ T13] __alloc_frozen_pages_noprof+0x6ab/0x2dc0 [ 766.046449][ T13] new_slab+0xa2/0x640 [ 766.047739][ T13] refill_objects+0xe3/0x410 [ 766.049208][ T13] __pcs_replace_empty_main+0x376/0x680 [ 766.050941][ T13] __kmalloc_cache_noprof+0x479/0x6c0 [ 766.052614][ T13] cryptomgr_notify+0xa4/0xb40 [ 766.054185][ T13] notifier_call_chain+0x99/0x3f0 [ 766.055786][ T13] blocking_notifier_call_chain+0x69/0xa0 [ 766.057578][ T13] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 766.059270][ T13] crypto_grab_spawn+0x8c/0x3e0 [ 766.060836][ T13] hmac_create+0x1c5/0x920 [ 766.062275][ T13] cryptomgr_probe+0xb9/0x290 [ 766.063813][ T13] kthread+0x370/0x450 [ 766.065141][ T13] ret_from_fork+0x72b/0xd50 [ 766.066587][ T13] page last free pid 29372 tgid 29367 stack trace: [ 766.068907][ T13] free_unref_folios+0xa44/0x1710 [ 766.070527][ T13] folios_put_refs+0x585/0xaa0 [ 766.072030][ T13] truncate_inode_pages_range+0x30c/0x1050 [ 766.073888][ T13] blkdev_flush_mapping+0xfb/0x2e0 [ 766.075509][ T13] blkdev_put_whole+0xc9/0xf0 [ 766.076985][ T13] bdev_release+0x47f/0x6d0 [ 766.078650][ T13] blkdev_release+0x15/0x20 [ 766.080326][ T13] __fput+0x3ff/0xb50 [ 766.081641][ T13] task_work_run+0x150/0x240 [ 766.083118][ T13] do_exit+0x951/0x2ae0 [ 766.084485][ T13] do_group_exit+0xd5/0x2a0 [ 766.085982][ T13] get_signal+0x1ec7/0x21e0 [ 766.087381][ T13] arch_do_signal_or_restart+0x91/0x7a0 [ 766.089114][ T13] exit_to_user_mode_loop+0x139/0x6f0 [ 766.090786][ T13] __do_fast_syscall_32+0x701/0x970 [ 766.092417][ T13] do_fast_syscall_32+0x32/0x70 [ 766.093993][ T13] [ 766.094758][ T13] Memory state around the buggy address: [ 766.096513][ T13] ffff888061c50300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 766.098997][ T13] ffff888061c50380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 766.101484][ T13] >ffff888061c50400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 766.103998][ T13] ^ [ 766.106479][ T13] ffff888061c50480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 766.108965][ T13] ffff888061c50500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 766.111465][ T13] ================================================================== [ 766.113977][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 766.116223][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 766.119597][ T13] Tainted: [L]=SOFTLOCKUP [ 766.120957][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 766.124135][ T13] Workqueue: usbip_event event_handler [ 766.125865][ T13] Call Trace: [ 766.126929][ T13] [ 766.127880][ T13] dump_stack_lvl+0x100/0x190 [ 766.129388][ T13] vpanic+0x552/0x970 [ 766.130626][ T13] ? __pfx_vpanic+0x10/0x10 [ 766.131910][ T13] ? __pfx_vprintk_emit+0x10/0x10 [ 766.133348][ T13] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 766.134826][ T13] panic+0xd1/0xe0 [ 766.135878][ T13] ? __pfx_panic+0x10/0x10 [ 766.137127][ T13] ? end_report.part.0+0x23/0x90 [ 766.138689][ T13] ? rcu_is_watching+0x12/0xc0 [ 766.140199][ T13] ? end_report.part.0+0x23/0x90 [ 766.141798][ T13] ? check_panic_on_warn+0x1f/0x90 [ 766.143448][ T13] check_panic_on_warn.cold+0x19/0x34 [ 766.145140][ T13] end_report.part.0+0x3a/0x90 [ 766.146650][ T13] kasan_report.cold+0xe/0x18 [ 766.148135][ T13] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 766.149827][ T13] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 766.151512][ T13] __kasan_check_byte+0x36/0x50 [ 766.153094][ T13] lock_acquire+0x132/0x370 [ 766.154559][ T13] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 766.156376][ T13] ? _raw_spin_lock_irqsave+0x52/0x60 [ 766.158068][ T13] _raw_spin_lock_irqsave+0x3a/0x60 [ 766.159694][ T13] ? event_handler+0x21e/0x570 [ 766.161219][ T13] event_handler+0x21e/0x570 [ 766.162623][ T13] process_one_work+0xa23/0x1940 [ 766.164189][ T13] ? __pfx_process_one_work+0x10/0x10 [ 766.165876][ T13] ? __pfx_event_handler+0x10/0x10 [ 766.167484][ T13] worker_thread+0x5ef/0xe50 [ 766.168949][ T13] ? kthread+0x13a/0x450 [ 766.170304][ T13] ? __pfx_worker_thread+0x10/0x10 [ 766.171909][ T13] kthread+0x370/0x450 [ 766.173210][ T13] ? __pfx_kthread+0x10/0x10 [ 766.174684][ T13] ret_from_fork+0x72b/0xd50 [ 766.176140][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 766.177753][ T13] ? __switch_to+0x800/0x10f0 [ 766.179241][ T13] ? __pfx_kthread+0x10/0x10 [ 766.180705][ T13] ret_from_fork_asm+0x1a/0x30 [ 766.182230][ T13] [ 766.183772][ T13] Kernel Offset: disabled [ 766.185143][ T13] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:14:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0a635 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc900001f7570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9b6f7219 R15=ffffffff85a0a5d0 RIP=ffffffff85a0a65f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c31f5ef CR3=0000000024c90000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000087 Opmask01=0000000000000001 Opmask02=0000000006000000 Opmask03=0000000000000000 Opmask04=00000000fdffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1e91121b 00007ffe1e91121b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1e911720 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1e911720 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3331542020205b5d 3233373130372e35 363720205b3e363c 0064657265000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3331542020205157 3233373130372435 3637202051343636 0064657265000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636876206463685f 69636876205d3630 353932545b5d3438 303939362e353637 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303d6f6e72726520 303d73657220313d 6f6e692022736670 6d74223d76656420 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2230303030303030 3056535953223d65 6d616e2022333937 392e322e7a797322 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d6d6f63206465 6c6961663d657375 616320617461645f 7463656c6c6f633d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706f2064656e6966 6e6f636e753d6a62 7573203539323736 39343932343d7365 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c742540 RSI=ffffffff81b51ece RDI=ffff88801c742540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000031323ffc CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90004baff48 RCX=0000000000000814 RDX=0000000000000000 RSI=ffffffff8c400a00 RDI=0000000000000014 RBP=ffffc90004baff38 RSP=ffffc90004baff00 R8 =0000000000000000 R9 =fffffbfff22455fa R10=ffffffff9122afd7 R11=0000000000000000 R12=ffff888028f02540 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81b68bc8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d58b8 CR3=0000000058d53000 CR4=00352ef0 DR0=00000000000000a7 DR1=fffeffffff7fff05 DR2=0000000080000002 DR3=0080000000000004 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c7fa540 RSI=ffffffff81b51ece RDI=ffff88801c7fa540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f255c0 CR3=000000000e994000 CR4=00350ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000