last executing test programs: 6m21.10494081s ago: executing program 2 (id=3809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 6m21.077980896s ago: executing program 2 (id=3811): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0) sendmsg$unix(r0, &(0x7f0000000780)={&(0x7f0000000280)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1]}}], 0x24}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b", 0x2a, 0xebec93e830f96115}) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=@OVL_FILEID_V0={0x15, 0xfe, {0x0, 0xfb, 0x15, 0x2, 0x44, "b464e15688d32a5c55332899da424cb5"}}, 0x1) shutdown(0xffffffffffffffff, 0x1) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, &(0x7f0000000480)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) r8 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 6m19.779421836s ago: executing program 2 (id=3817): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x5, 0x0) r5 = inotify_init() io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r7, 0x1, r6, 0x7, 0x80000}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m17.999624306s ago: executing program 2 (id=3822): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) (fail_nth: 10) 6m17.88974783s ago: executing program 2 (id=3823): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "68c4502393926b50", "09f700", "1ab6c0ff"}, 0x28) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000140)='source', 0x0, r8) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f00004ef000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000005c0)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1ec5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b41d8a4788c60408618437c442308dbf70cfeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2efc75bdfd01e9d1ae1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r11, @ANYBLOB="114efd205482b68010cfd7"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 6m17.259129791s ago: executing program 2 (id=3826): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtaction={0xb8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0xa4, 0x1, [@m_sample={0xa0, 0x1, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_RATE={0x4, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x801ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc82}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x7, 0x4, 0x7, 0x599369f4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80000001}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7, 0x20000000, 0x4, 0x9}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0xb8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7) r5 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r6 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000340)}, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r7, 0xc0245628, &(0x7f0000000140)={0x0, 0x8, 0x5, '\x00', &(0x7f0000000100)=0xed}) 6m16.359640939s ago: executing program 32 (id=3826): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtaction={0xb8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0xa4, 0x1, [@m_sample={0xa0, 0x1, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_RATE={0x4, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x801ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc82}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x7, 0x4, 0x7, 0x599369f4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80000001}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7, 0x20000000, 0x4, 0x9}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0xb8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7) r5 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r6 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000340)}, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r7, 0xc0245628, &(0x7f0000000140)={0x0, 0x8, 0x5, '\x00', &(0x7f0000000100)=0xed}) 2m28.100547476s ago: executing program 3 (id=4873): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x2}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) 2m28.007725647s ago: executing program 3 (id=4874): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 2m28.00592381s ago: executing program 3 (id=4875): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r0, 0x40044582, 0x0) 2m26.693197982s ago: executing program 3 (id=4877): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m26.692258619s ago: executing program 3 (id=4878): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 2m26.469656928s ago: executing program 3 (id=4879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2m26.434950631s ago: executing program 33 (id=4879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1m13.193225702s ago: executing program 0 (id=5675): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) fcntl$setlease(r1, 0x400, 0x0) 1m13.192801556s ago: executing program 0 (id=5676): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x1, 0x1, 0x5, 0x10000f}]}) 1m13.131004795s ago: executing program 0 (id=5677): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m13.130658869s ago: executing program 0 (id=5678): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc000) 1m13.066853503s ago: executing program 0 (id=5679): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) getpid() r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x5) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x5) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0xfd}) umount2(&(0x7f0000000040)='.\x00', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x87f, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1m13.050304996s ago: executing program 0 (id=5680): r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 56.934423019s ago: executing program 34 (id=5680): r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 1.837832233s ago: executing program 6 (id=6904): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000, {0x5, 0xd08, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0xd60, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x932, 0x7) 1.729897588s ago: executing program 6 (id=6908): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x80) r3 = dup3(r2, r1, 0x80000) read(r3, &(0x7f00000000c0)=""/226, 0xe2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) read$watch_queue(r3, &(0x7f0000001d40)=""/4095, 0xfff) 785.967154ms ago: executing program 5 (id=6929): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) socket$alg(0x26, 0x5, 0x0) epoll_create1(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES32=r3], 0x7c}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 782.755648ms ago: executing program 6 (id=6930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007b000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x6, 0xa, 0x9f, 0x0}) 771.834023ms ago: executing program 5 (id=6931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 769.438688ms ago: executing program 6 (id=6932): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 711.484009ms ago: executing program 6 (id=6933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000ffffffffffff00000000000081002b0086dd6900040000302c00fc020000000000000000000000000001fe8800000000000000000000000000013c00000000000000060404"], 0x6e) 649.293467ms ago: executing program 5 (id=6937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 599.264584ms ago: executing program 6 (id=6938): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) timer_create(0x7, 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/180, 0xb4}], 0x1) 547.251767ms ago: executing program 5 (id=6939): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') unshare(0x22020600) preadv(r0, 0x0, 0x0, 0x12e, 0x0) 476.536479ms ago: executing program 5 (id=6940): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) socket$alg(0x26, 0x5, 0x0) epoll_create1(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES32=r3], 0x7c}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 473.45691ms ago: executing program 4 (id=6941): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 470.142128ms ago: executing program 5 (id=6942): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') r1 = fanotify_init(0x40, 0x2) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x9b) 390.837531ms ago: executing program 4 (id=6943): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2029) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) io_submit(r3, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r2, r0, 0x0) 310.203115ms ago: executing program 1 (id=6945): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x50, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd8], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x5, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) syz_clone3(&(0x7f0000000380)={0x1181700, &(0x7f0000000000), 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x2000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x4, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0xffffffffffffffff, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 260.058816ms ago: executing program 4 (id=6946): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100020, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 207.973757ms ago: executing program 4 (id=6947): openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c0b7d010fdeb5fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='contention_begin\x00', r0}, 0x18) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x10002007, 0x2000021, 0xfffffffd, 0x17, 0x3, 0xbc, 0x5, 0x14c, 0xffffffffffffffff}) 155.601103ms ago: executing program 4 (id=6948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 150.288275ms ago: executing program 1 (id=6949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) 90.471847ms ago: executing program 1 (id=6950): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) socket$alg(0x26, 0x5, 0x0) epoll_create1(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES32=r3], 0x7c}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 83.375545ms ago: executing program 4 (id=6951): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) io_setup(0x2, &(0x7f0000000000)) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000d840)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 15.891951ms ago: executing program 1 (id=6952): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 14.805266ms ago: executing program 1 (id=6953): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x524a043a, 0x8001, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x40, 0x5}}, 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(0x0, 0x3, 0x200a1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=6954): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000007, 0x11, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): d with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 216.511265][ T8945] loop6: detected capacity change from 0 to 524279808 [ 216.559822][ T8945] loop6: detected capacity change from 524279808 to 1 [ 216.566501][ T8945] Dev loop6: unable to read RDB block 1 [ 216.568659][ T8945] loop6: unable to read partition table [ 216.570865][ T8945] loop6: partition table beyond EOD, truncated [ 216.573349][ T8945] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 216.719361][ T8954] syzkaller0: entered promiscuous mode [ 216.721660][ T8954] syzkaller0: entered allmulticast mode [ 216.768488][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 216.919818][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.922869][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.926402][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.929693][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 216.933594][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 216.938360][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.941427][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.943994][ T9] usb 7-1: Product: syz [ 216.945421][ T9] usb 7-1: Manufacturer: syz [ 216.952705][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 216.954413][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 216.956750][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 216.958708][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 217.002688][ T40] audit: type=1326 audit(1761174316.463:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 217.038559][ T40] audit: type=1326 audit(1761174316.463:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 217.045192][ T40] audit: type=1326 audit(1761174316.463:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 217.139657][ T40] audit: type=1326 audit(1761174316.463:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 217.151692][ T40] audit: type=1326 audit(1761174316.463:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 217.161924][ T40] audit: type=1326 audit(1761174316.463:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 217.172054][ T40] audit: type=1326 audit(1761174316.463:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 217.182251][ T40] audit: type=1326 audit(1761174316.463:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 217.192908][ T40] audit: type=1326 audit(1761174316.463:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 217.311747][ T6007] usb 7-1: USB disconnect, device number 6 [ 217.491065][ T8967] netlink: 44 bytes leftover after parsing attributes in process `syz.0.692'. [ 218.560993][ T9004] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 218.608744][ T8598] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 218.778271][ T8598] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.780968][ T8598] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 218.788367][ T8598] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.792603][ T8598] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 218.795953][ T8598] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 218.802282][ T8598] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.805147][ T8598] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.807873][ T8598] usb 8-1: Product: syz [ 218.820574][ T8598] usb 8-1: Manufacturer: syz [ 218.826770][ T8598] cdc_wdm 8-1:1.0: skipping garbage [ 218.828597][ T8598] cdc_wdm 8-1:1.0: skipping garbage [ 218.831081][ T8598] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 218.832939][ T8598] cdc_wdm 8-1:1.0: Unknown control protocol [ 218.984550][ T9013] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 218.987279][ T9013] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 219.011321][ T9013] vhci_hcd vhci_hcd.0: Device attached [ 219.036540][ T60] usb 8-1: USB disconnect, device number 6 [ 219.438413][ T29] usb 40-1: SetAddress Request (18) to port 0 [ 219.440656][ T29] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 219.610887][ T9014] vhci_hcd: connection reset by peer [ 219.613495][ T1145] vhci_hcd: stop threads [ 219.615170][ T1145] vhci_hcd: release socket [ 219.616601][ T1145] vhci_hcd: disconnect device [ 219.635538][ T9028] netlink: zone id is out of range [ 219.637718][ T9028] netlink: zone id is out of range [ 219.640087][ T9028] netlink: del zone limit has 4 unknown bytes [ 219.683344][ T9033] lo speed is unknown, defaulting to 1000 [ 219.701538][ T9034] netlink: 'syz.0.707': attribute type 29 has an invalid length. [ 219.704942][ T9034] netlink: 'syz.0.707': attribute type 3 has an invalid length. [ 219.708153][ T9034] netlink: 76 bytes leftover after parsing attributes in process `syz.0.707'. [ 219.784313][ T9033] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 219.811254][ T9039] could not allocate digest TFM handle crc32c-intel [ 219.857476][ T9042] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 220.178417][ T1471] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 220.330110][ T1471] usb 8-1: Using ep0 maxpacket: 16 [ 220.337799][ T1471] usb 8-1: New USB device found, idVendor=2717, idProduct=4106, bcdDevice=28.92 [ 220.341325][ T1471] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.344279][ T1471] usb 8-1: Product: syz [ 220.345672][ T1471] usb 8-1: Manufacturer: syz [ 220.347372][ T1471] usb 8-1: SerialNumber: syz [ 220.351005][ T1471] usb 8-1: config 0 descriptor?? [ 220.564938][ T8598] usb 8-1: USB disconnect, device number 7 [ 220.602373][ T9061] syz.0.718 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 220.611477][ T9065] nbd: must specify a size in bytes for the device [ 220.843610][ T60] hid_parser_main: 74 callbacks suppressed [ 220.843825][ T60] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 220.850820][ T60] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 220.854086][ T60] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 220.857207][ T60] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 220.860466][ T60] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 220.863636][ T60] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 220.866905][ T60] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 220.871522][ T60] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 220.874692][ T60] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 220.877971][ T60] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 220.886761][ T60] hid-generic 0003:0003:0000.0005: hidraw1: USB HID v0.00 Device [syz1] on syz1 [ 220.899682][ T9074] FAULT_INJECTION: forcing a failure. [ 220.899682][ T9074] name failslab, interval 1, probability 0, space 0, times 0 [ 220.904197][ T9074] CPU: 2 UID: 0 PID: 9074 Comm: syz.0.721 Not tainted syzkaller #0 PREEMPT(full) [ 220.904220][ T9074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.904230][ T9074] Call Trace: [ 220.904236][ T9074] [ 220.904243][ T9074] dump_stack_lvl+0x16c/0x1f0 [ 220.904267][ T9074] should_fail_ex+0x512/0x640 [ 220.904292][ T9074] ? fs_reclaim_acquire+0xae/0x150 [ 220.904317][ T9074] should_failslab+0xc2/0x120 [ 220.904340][ T9074] __kmalloc_cache_noprof+0x72/0x780 [ 220.904368][ T9074] ? uhid_queue_event+0x46/0xe0 [ 220.904388][ T9074] ? up_write+0x1b2/0x520 [ 220.904417][ T9074] ? uhid_queue_event+0x46/0xe0 [ 220.904435][ T9074] uhid_queue_event+0x46/0xe0 [ 220.904455][ T9074] hid_device_remove+0x1fa/0x260 [ 220.904478][ T9074] ? __pfx_hid_device_remove+0x10/0x10 [ 220.904502][ T9074] device_remove+0xcb/0x170 [ 220.904524][ T9074] device_release_driver_internal+0x44b/0x620 [ 220.904554][ T9074] bus_remove_device+0x22f/0x420 [ 220.904578][ T9074] device_del+0x396/0x9f0 [ 220.904603][ T9074] ? __pfx_device_del+0x10/0x10 [ 220.904627][ T9074] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 220.904649][ T9074] hid_destroy_device+0x19c/0x240 [ 220.904670][ T9074] uhid_char_write+0xdcb/0x1060 [ 220.904690][ T9074] ? __pfx_uhid_char_write+0x10/0x10 [ 220.904709][ T9074] vfs_write+0x2a0/0x11d0 [ 220.904735][ T9074] ? __pfx_vfs_write+0x10/0x10 [ 220.904750][ T9074] ? find_held_lock+0x2b/0x80 [ 220.904769][ T9074] ? __fget_files+0x204/0x3c0 [ 220.904792][ T9074] ? __fget_files+0x20e/0x3c0 [ 220.904806][ T9074] ? handle_mm_fault+0x240/0xd10 [ 220.904839][ T9074] ksys_write+0x1f8/0x250 [ 220.904858][ T9074] ? __pfx_ksys_write+0x10/0x10 [ 220.904879][ T9074] ? rcu_is_watching+0x12/0xc0 [ 220.904902][ T9074] __do_fast_syscall_32+0x7c/0x300 [ 220.904925][ T9074] do_fast_syscall_32+0x32/0x80 [ 220.904945][ T9074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.904967][ T9074] RIP: 0023:0xf6ffd579 [ 220.904982][ T9074] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 220.904999][ T9074] RSP: 002b:00000000f53cc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 220.905016][ T9074] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 220.905027][ T9074] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.905037][ T9074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.905047][ T9074] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 220.905057][ T9074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.905085][ T9074] [ 220.938846][ T9075] fido_id[9075]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.099604][ T9081] FAULT_INJECTION: forcing a failure. [ 221.099604][ T9081] name failslab, interval 1, probability 0, space 0, times 0 [ 221.103805][ T9081] CPU: 0 UID: 0 PID: 9081 Comm: syz.2.723 Not tainted syzkaller #0 PREEMPT(full) [ 221.103820][ T9081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.103827][ T9081] Call Trace: [ 221.103832][ T9081] [ 221.103837][ T9081] dump_stack_lvl+0x16c/0x1f0 [ 221.103853][ T9081] should_fail_ex+0x512/0x640 [ 221.103873][ T9081] should_failslab+0xc2/0x120 [ 221.103889][ T9081] kmem_cache_alloc_node_noprof+0x78/0x770 [ 221.103901][ T9081] ? __alloc_skb+0x2b2/0x380 [ 221.103922][ T9081] ? __alloc_skb+0x2b2/0x380 [ 221.103937][ T9081] __alloc_skb+0x2b2/0x380 [ 221.103956][ T9081] ? __pfx___alloc_skb+0x10/0x10 [ 221.103991][ T9081] tipc_buf_acquire+0x26/0xe0 [ 221.104020][ T9081] tipc_disc_create+0xc1/0x630 [ 221.104052][ T9081] tipc_enable_bearer+0xbf6/0x11e0 [ 221.104070][ T9081] ? __pfx_tipc_enable_bearer+0x10/0x10 [ 221.104081][ T9081] ? __pfx___nla_validate_parse+0x10/0x10 [ 221.104098][ T9081] ? __nla_parse+0x40/0x60 [ 221.104113][ T9081] __tipc_nl_bearer_enable+0x332/0x420 [ 221.104126][ T9081] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 221.104146][ T9081] ? tipc_nl_compat_bearer_enable+0x362/0x5d0 [ 221.104167][ T9081] ? __nla_parse+0x40/0x60 [ 221.104181][ T9081] __tipc_nl_compat_doit+0x32e/0x3d0 [ 221.104197][ T9081] ? netlink_unicast+0x64c/0x870 [ 221.104207][ T9081] ? netlink_sendmsg+0x8c8/0xdd0 [ 221.104218][ T9081] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 221.104233][ T9081] ? __do_fast_syscall_32+0x7c/0x300 [ 221.104253][ T9081] ? bpf_lsm_capable+0x9/0x10 [ 221.104268][ T9081] ? security_capable+0x7e/0x260 [ 221.104285][ T9081] tipc_nl_compat_doit+0x11e/0x290 [ 221.104302][ T9081] tipc_nl_compat_recv+0x95b/0xc50 [ 221.104319][ T9081] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 221.104335][ T9081] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 221.104346][ T9081] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 221.104366][ T9081] ? __pfx___mutex_trylock_common+0x10/0x10 [ 221.104385][ T9081] ? rcu_is_watching+0x12/0xc0 [ 221.104398][ T9081] ? trace_contention_end+0xdd/0x130 [ 221.104413][ T9081] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 221.104431][ T9081] genl_family_rcv_msg_doit+0x209/0x2f0 [ 221.104445][ T9081] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 221.104459][ T9081] ? genl_get_cmd+0x194/0x580 [ 221.104475][ T9081] ? __radix_tree_lookup+0x21f/0x2c0 [ 221.104496][ T9081] genl_rcv_msg+0x55c/0x800 [ 221.104510][ T9081] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.104524][ T9081] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 221.104546][ T9081] netlink_rcv_skb+0x158/0x420 [ 221.104557][ T9081] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.104571][ T9081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.104588][ T9081] ? netlink_deliver_tap+0x1ae/0xd30 [ 221.104608][ T9081] genl_rcv+0x28/0x40 [ 221.104619][ T9081] netlink_unicast+0x5aa/0x870 [ 221.104632][ T9081] ? __pfx_netlink_unicast+0x10/0x10 [ 221.104643][ T9081] ? __pfx___might_resched+0x10/0x10 [ 221.104660][ T9081] netlink_sendmsg+0x8c8/0xdd0 [ 221.104674][ T9081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.104687][ T9081] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 221.104706][ T9081] ____sys_sendmsg+0xa98/0xc70 [ 221.104721][ T9081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.104733][ T9081] ? get_compat_msghdr+0x11a/0x170 [ 221.104758][ T9081] ___sys_sendmsg+0x134/0x1d0 [ 221.104769][ T9081] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.104794][ T9081] ? find_held_lock+0x2b/0x80 [ 221.104815][ T9081] __sys_sendmsg+0x16d/0x220 [ 221.104825][ T9081] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.104842][ T9081] ? rcu_is_watching+0x12/0xc0 [ 221.104855][ T9081] __do_fast_syscall_32+0x7c/0x300 [ 221.104870][ T9081] do_fast_syscall_32+0x32/0x80 [ 221.104883][ T9081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.104897][ T9081] RIP: 0023:0xf701d579 [ 221.104906][ T9081] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 221.104917][ T9081] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 221.104927][ T9081] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 221.104934][ T9081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.104940][ T9081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.104946][ T9081] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 221.104952][ T9081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.104967][ T9081] [ 221.104984][ T9081] tipc: Disabling bearer [ 221.167632][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'. [ 221.272981][ T9081] tipc: Enabling of bearer rejected, failed to create discoverer [ 221.316460][ T9088] netlink: 212 bytes leftover after parsing attributes in process `syz.1.725'. [ 221.645750][ T40] audit: type=1326 audit(1761174321.103:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.3.729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 221.673674][ T1142] Bluetooth: hci4: Frame reassembly failed (-84) [ 221.731663][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 221.743446][ T9105] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 221.746158][ T9105] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 221.752936][ T9105] vhci_hcd vhci_hcd.0: Device attached [ 221.753914][ T9101] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.189384][ T1471] usb 42-1: SetAddress Request (23) to port 0 [ 222.192654][ T1471] usb 42-1: new SuperSpeed USB device number 23 using vhci_hcd [ 222.246171][ T9116] random: crng reseeded on system resumption [ 222.403869][ T9106] vhci_hcd: connection reset by peer [ 222.425182][ T1145] vhci_hcd: stop threads [ 222.427055][ T1145] vhci_hcd: release socket [ 222.436085][ T1145] vhci_hcd: disconnect device [ 222.571421][ T9118] netlink: 44 bytes leftover after parsing attributes in process `syz.1.733'. [ 223.578475][ T9] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 223.688535][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 223.688579][ T5952] Bluetooth: hci4: command 0x1003 tx timeout [ 223.977041][ T9148] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 224.108507][ T9] usb 5-1: device descriptor read/64, error -71 [ 224.226968][ T9151] random: crng reseeded on system resumption [ 224.348579][ T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 224.488431][ T29] usb 40-1: device descriptor read/8, error -110 [ 224.488440][ T9] usb 5-1: device descriptor read/64, error -71 [ 224.657662][ T9] usb usb5-port1: attempt power cycle [ 224.675042][ T9153] FAULT_INJECTION: forcing a failure. [ 224.675042][ T9153] name failslab, interval 1, probability 0, space 0, times 0 [ 224.680409][ T9153] CPU: 3 UID: 0 PID: 9153 Comm: syz.3.743 Not tainted syzkaller #0 PREEMPT(full) [ 224.680433][ T9153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.680443][ T9153] Call Trace: [ 224.680448][ T9153] [ 224.680455][ T9153] dump_stack_lvl+0x16c/0x1f0 [ 224.680478][ T9153] should_fail_ex+0x512/0x640 [ 224.680506][ T9153] should_failslab+0xc2/0x120 [ 224.680527][ T9153] kmem_cache_alloc_node_noprof+0x78/0x770 [ 224.680544][ T9153] ? zswap_store+0x850/0x2830 [ 224.680573][ T9153] ? zswap_store+0x850/0x2830 [ 224.680596][ T9153] zswap_store+0x850/0x2830 [ 224.680630][ T9153] ? __pfx_zswap_store+0x10/0x10 [ 224.680654][ T9153] ? folio_free_swap+0x141/0x4b0 [ 224.680675][ T9153] ? do_raw_spin_unlock+0x172/0x230 [ 224.680701][ T9153] ? _raw_spin_unlock+0x28/0x50 [ 224.680715][ T9153] ? folio_free_swap+0x19d/0x4b0 [ 224.680740][ T9153] swap_writeout+0x3f4/0x1090 [ 224.680769][ T9153] shrink_folio_list+0x3e50/0x4800 [ 224.680802][ T9153] ? __pfx_shrink_folio_list+0x10/0x10 [ 224.680836][ T9153] ? __lock_acquire+0x622/0x1c90 [ 224.680861][ T9153] ? __lock_acquire+0x622/0x1c90 [ 224.680905][ T9153] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 224.680926][ T9153] reclaim_folio_list+0xda/0x5d0 [ 224.680949][ T9153] ? __pfx_css_rstat_updated+0x10/0x10 [ 224.680970][ T9153] ? __pfx_reclaim_folio_list+0x10/0x10 [ 224.681003][ T9153] ? lru_gen_update_size+0x543/0xe10 [ 224.681038][ T9153] ? lru_gen_del_folio+0x32b/0x540 [ 224.681064][ T9153] reclaim_pages+0x3ec/0x570 [ 224.681080][ T9153] ? __pfx_reclaim_pages+0x10/0x10 [ 224.681093][ T9153] ? find_held_lock+0x2b/0x80 [ 224.681110][ T9153] ? madvise_cold_or_pageout_pte_range+0x73e/0x20d0 [ 224.681171][ T9153] madvise_cold_or_pageout_pte_range+0x14e5/0x20d0 [ 224.681204][ T9153] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 224.681231][ T9153] ? lock_acquire+0x179/0x350 [ 224.681253][ T9153] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 224.681277][ T9153] walk_pgd_range+0xc05/0x1f50 [ 224.681311][ T9153] ? __pfx_walk_pgd_range+0x10/0x10 [ 224.681335][ T9153] __walk_page_range+0x163/0x820 [ 224.681355][ T9153] ? __lock_acquire+0xb8a/0x1c90 [ 224.681381][ T9153] walk_page_range_vma+0x2c7/0xa20 [ 224.681402][ T9153] ? __pfx_walk_page_range_vma+0x10/0x10 [ 224.681420][ T9153] ? find_held_lock+0x2b/0x80 [ 224.681446][ T9153] madvise_pageout+0x257/0x540 [ 224.681468][ T9153] ? __pfx_madvise_pageout+0x10/0x10 [ 224.681486][ T9153] ? mas_ascend+0x4f6/0x900 [ 224.681502][ T9153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.681543][ T9153] madvise_vma_behavior+0xb14/0x2d50 [ 224.681569][ T9153] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 224.681586][ T9153] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 224.681609][ T9153] ? mas_prev+0x9b/0xf0 [ 224.681627][ T9153] ? __pfx_mas_prev+0x10/0x10 [ 224.681651][ T9153] ? find_vma_prev+0xd3/0x150 [ 224.681672][ T9153] ? __pfx_find_vma_prev+0x10/0x10 [ 224.681706][ T9153] madvise_walk_vmas+0x31f/0x9c0 [ 224.681732][ T9153] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 224.681761][ T9153] madvise_do_behavior+0x1e2/0x530 [ 224.681786][ T9153] ? __pfx_madvise_do_behavior+0x10/0x10 [ 224.681808][ T9153] ? down_read+0x13d/0x480 [ 224.681839][ T9153] do_madvise+0x176/0x240 [ 224.681860][ T9153] ? __pfx_do_madvise+0x10/0x10 [ 224.681883][ T9153] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 224.681923][ T9153] ? __fget_files+0x20e/0x3c0 [ 224.681948][ T9153] ? __pfx_ksys_write+0x10/0x10 [ 224.681970][ T9153] __ia32_sys_madvise+0xa7/0x110 [ 224.681992][ T9153] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 224.682017][ T9153] __do_fast_syscall_32+0x7c/0x300 [ 224.682038][ T9153] do_fast_syscall_32+0x32/0x80 [ 224.682056][ T9153] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.682075][ T9153] RIP: 0023:0xf7fa4579 [ 224.682088][ T9153] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 224.682103][ T9153] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 00000000000000db [ 224.682120][ T9153] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000c00304 [ 224.682130][ T9153] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.682139][ T9153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.682148][ T9153] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 224.682157][ T9153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.682185][ T9153] [ 224.940163][ T29] usb usb40-port1: attempt power cycle [ 224.998430][ T9] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 225.030127][ T9] usb 5-1: device descriptor read/8, error -71 [ 225.278452][ T9] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 225.299886][ T9] usb 5-1: device descriptor read/8, error -71 [ 225.409567][ T9] usb usb5-port1: unable to enumerate USB device [ 225.498890][ T29] usb usb40-port1: unable to enumerate USB device [ 225.577941][ T9174] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 225.581428][ T9174] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 225.750415][ T9178] lo speed is unknown, defaulting to 1000 [ 225.885817][ T9178] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 225.954779][ T9182] tipc: Started in network mode [ 225.956875][ T9182] tipc: Node identity ac14142f, cluster identity 4711 [ 225.960180][ T9182] tipc: Enabling of bearer rejected, failed to enable media [ 226.051559][ T9187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.093574][ T9190] tipc: Enabled bearer , priority 0 [ 226.099536][ T9190] syzkaller0: entered promiscuous mode [ 226.101690][ T9190] syzkaller0: entered allmulticast mode [ 226.112608][ T9190] netlink: 2 bytes leftover after parsing attributes in process `syz.2.755'. [ 226.119792][ T9190] syzkaller0: mtu greater than device maximum [ 226.124844][ T9189] tipc: Resetting bearer [ 226.147897][ T9189] tipc: Disabling bearer [ 226.166594][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 226.234461][ T9195] /dev/nullb0: Can't open blockdev [ 226.505140][ T9201] syzkaller1: entered promiscuous mode [ 226.506925][ T9201] syzkaller1: entered allmulticast mode [ 227.349251][ T1471] usb 42-1: device descriptor read/8, error -110 [ 227.681571][ T9211] loop2: detected capacity change from 0 to 7 [ 227.688892][ T5939] Dev loop2: unable to read RDB block 7 [ 227.692105][ T5939] loop2: unable to read partition table [ 227.694583][ T5939] loop2: partition table beyond EOD, truncated [ 227.695085][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.763'. [ 227.703608][ T9211] Dev loop2: unable to read RDB block 7 [ 227.705950][ T9211] loop2: unable to read partition table [ 227.709085][ T9211] loop2: partition table beyond EOD, truncated [ 227.711702][ T9211] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.758996][ T1471] usb usb42-port1: attempt power cycle [ 227.992602][ T9222] input: syz1 as /devices/virtual/input/input12 [ 228.340329][ T1471] usb usb42-port1: unable to enumerate USB device [ 228.893119][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 228.893135][ T40] audit: type=1326 audit(1761174328.353:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.2.770" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d579 code=0x0 [ 229.072186][ T9242] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 229.074986][ T9242] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 229.081911][ T9242] vhci_hcd vhci_hcd.0: Device attached [ 229.338449][ T8598] usb 41-1: new high-speed USB device number 14 using vhci_hcd [ 229.478688][ T9249] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.920289][ T40] audit: type=1326 audit(1761174329.383:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 229.942928][ T40] audit: type=1326 audit(1761174329.393:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.778" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 229.952020][ T40] audit: type=1326 audit(1761174329.393:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 230.063332][ T40] audit: type=1326 audit(1761174329.393:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.778" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 230.071305][ T40] audit: type=1326 audit(1761174329.393:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 230.079872][ T40] audit: type=1326 audit(1761174329.393:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.778" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 230.086812][ T40] audit: type=1326 audit(1761174329.393:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 230.093839][ T40] audit: type=1326 audit(1761174329.393:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.778" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 230.100469][ T40] audit: type=1326 audit(1761174329.393:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 230.238776][ T9271] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 230.241544][ T9243] vhci_hcd: connection reset by peer [ 230.248129][ T46] vhci_hcd: stop threads [ 230.258373][ T46] vhci_hcd: release socket [ 230.260194][ T46] vhci_hcd: disconnect device [ 230.623260][ T9286] Bluetooth: MGMT ver 1.23 [ 230.666723][ T9290] tipc: Started in network mode [ 230.668858][ T9290] tipc: Node identity 826f1898bae9, cluster identity 4711 [ 230.672671][ T9290] tipc: Enabled bearer , priority 0 [ 230.675570][ T9290] syzkaller0: entered promiscuous mode [ 230.677343][ T9290] syzkaller0: entered allmulticast mode [ 230.702375][ T9290] syzkaller0: mtu greater than device maximum [ 230.706256][ T9288] tipc: Resetting bearer [ 230.714564][ T9288] tipc: Disabling bearer [ 230.931630][ T9304] netlink: 25 bytes leftover after parsing attributes in process `syz.2.798'. [ 230.937528][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 231.048423][ T24] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 231.093360][ T9314] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 231.095566][ T9314] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.098957][ T9314] vhci_hcd vhci_hcd.0: Device attached [ 231.215054][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.219732][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.226345][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.228225][ T24] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 231.231372][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.234405][ T9323] syzkaller1: entered promiscuous mode [ 231.236871][ T9323] syzkaller1: entered allmulticast mode [ 231.237983][ T24] usb 5-1: config 0 descriptor?? [ 231.349296][ T9] usb 39-1: new high-speed USB device number 13 using vhci_hcd [ 231.398357][ T6023] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 231.570149][ T6023] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.572949][ T6023] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 231.576134][ T6023] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.579509][ T6023] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 231.583050][ T6023] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 231.589001][ T6023] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.591985][ T6023] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.594759][ T6023] usb 7-1: Product: syz [ 231.596177][ T6023] usb 7-1: Manufacturer: syz [ 231.602128][ T6023] cdc_wdm 7-1:1.0: skipping garbage [ 231.603914][ T6023] cdc_wdm 7-1:1.0: skipping garbage [ 231.606953][ T6023] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 231.609112][ T6023] cdc_wdm 7-1:1.0: Unknown control protocol [ 231.653780][ T24] hid_parser_main: 8 callbacks suppressed [ 231.653792][ T24] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0 [ 231.658165][ T24] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0 [ 231.661026][ T24] hid-steam 0003:28DE:1102.0006: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 231.718563][ T24] hid-steam 0003:28DE:1102.0006: Steam Controller 'XXXXXXXXXX' connected [ 231.728774][ T24] input: Steam Controller as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:28DE:1102.0006/input/input13 [ 231.769497][ T24] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 231.772703][ T24] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 231.786428][ T24] hid-steam 0003:28DE:1102.0007: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 231.838669][ T24] usb 7-1: USB disconnect, device number 7 [ 231.884586][ T9317] vhci_hcd: connection reset by peer [ 231.887144][ T1228] vhci_hcd: stop threads [ 231.888784][ T1228] vhci_hcd: release socket [ 231.890301][ T1228] vhci_hcd: disconnect device [ 231.973584][ T10] usb 5-1: USB disconnect, device number 11 [ 232.095282][ T10] hid-steam 0003:28DE:1102.0006: Steam Controller 'XXXXXXXXXX' disconnected [ 232.196397][ T9330] netlink: 56 bytes leftover after parsing attributes in process `syz.3.792'. [ 232.457025][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 232.515423][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 232.518578][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 232.522891][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 232.614045][ T9341] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.639495][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 232.790298][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.794774][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.798984][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.804152][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.807714][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.812310][ T24] usb 7-1: config 0 descriptor?? [ 232.889009][ T9357] XFS (nbd0): SB validate failed with error -5. [ 233.286987][ T9371] lo speed is unknown, defaulting to 1000 [ 233.300983][ T24] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 233.317986][ T24] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 233.561260][ T6023] usb 7-1: USB disconnect, device number 8 [ 233.909329][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 233.909340][ T40] audit: type=1326 audit(1761174333.373:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.0.806" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffd579 code=0x0 [ 234.037337][ T9386] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 234.039398][ T9386] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.042013][ T9386] vhci_hcd vhci_hcd.0: Device attached [ 234.173444][ T40] audit: type=1326 audit(1761174333.633:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.1.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 234.344268][ T40] audit: type=1326 audit(1761174333.663:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.1.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 234.355067][ T10] usb 37-1: new high-speed USB device number 11 using vhci_hcd [ 234.366005][ T40] audit: type=1326 audit(1761174333.663:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.1.809" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 234.378892][ T40] audit: type=1326 audit(1761174333.663:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.1.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 234.389763][ T40] audit: type=1326 audit(1761174333.663:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.1.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 234.396184][ T40] audit: type=1326 audit(1761174333.663:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.1.809" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 234.403012][ T40] audit: type=1326 audit(1761174333.663:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.1.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 234.410131][ T40] audit: type=1326 audit(1761174333.663:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.1.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 234.416909][ T40] audit: type=1326 audit(1761174333.663:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.1.809" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 234.488427][ T8598] vhci_hcd: vhci_device speed not set [ 234.974069][ T9387] vhci_hcd: connection reset by peer [ 234.977735][ T46] vhci_hcd: stop threads [ 234.995796][ T46] vhci_hcd: release socket [ 235.002325][ T46] vhci_hcd: disconnect device [ 235.691916][ T9409] 9pnet_fd: Insufficient options for proto=fd [ 235.696046][ T9409] Failed to get privilege flags for destination (handle=0x2:0xffffffff) [ 235.703421][ T8598] IPVS: starting estimator thread 0... [ 235.818369][ T9410] IPVS: using max 42 ests per chain, 100800 per kthread [ 235.939021][ T9413] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 235.941715][ T9413] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 235.949754][ T9413] vhci_hcd vhci_hcd.0: Device attached [ 236.188400][ T1334] usb 43-1: new high-speed USB device number 11 using vhci_hcd [ 236.500195][ T9] vhci_hcd: vhci_device speed not set [ 236.649313][ T9415] vhci_hcd: connection reset by peer [ 237.118919][ T1141] vhci_hcd: stop threads [ 237.120327][ T1141] vhci_hcd: release socket [ 237.121880][ T1141] vhci_hcd: disconnect device [ 237.351850][ T9440] netlink: 'syz.3.822': attribute type 10 has an invalid length. [ 237.355510][ T9440] FAULT_INJECTION: forcing a failure. [ 237.355510][ T9440] name failslab, interval 1, probability 0, space 0, times 0 [ 237.360964][ T9440] CPU: 3 UID: 0 PID: 9440 Comm: syz.3.822 Not tainted syzkaller #0 PREEMPT(full) [ 237.360986][ T9440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.361023][ T9440] Call Trace: [ 237.361031][ T9440] [ 237.361038][ T9440] dump_stack_lvl+0x16c/0x1f0 [ 237.361063][ T9440] should_fail_ex+0x512/0x640 [ 237.361094][ T9440] should_failslab+0xc2/0x120 [ 237.361119][ T9440] __kmalloc_cache_noprof+0x72/0x780 [ 237.361148][ T9440] ? add_lock_to_list+0x9d/0x130 [ 237.361170][ T9440] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 237.361197][ T9440] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 237.361218][ T9440] __hw_addr_add_ex+0x3c9/0x7c0 [ 237.361245][ T9440] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 237.361268][ T9440] ? lock_acquire+0x179/0x350 [ 237.361292][ T9440] ? do_raw_spin_lock+0x12c/0x2b0 [ 237.361320][ T9440] __hw_addr_sync+0x15b/0x310 [ 237.361349][ T9440] dev_mc_sync+0x105/0x180 [ 237.361373][ T9440] ipvlan_set_multicast_mac_filter+0x139/0x2c0 [ 237.361398][ T9440] ? __pfx_ipvlan_set_multicast_mac_filter+0x10/0x10 [ 237.361424][ T9440] ? do_raw_spin_lock+0x12c/0x2b0 [ 237.361451][ T9440] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 237.361479][ T9440] ? __pfx_ipvlan_set_multicast_mac_filter+0x10/0x10 [ 237.361504][ T9440] __dev_set_rx_mode+0x1d0/0x2e0 [ 237.361532][ T9440] __dev_open+0x422/0x7c0 [ 237.361559][ T9440] ? __pfx___dev_open+0x10/0x10 [ 237.361584][ T9440] ? __pfx_netif_set_mtu+0x10/0x10 [ 237.361601][ T9440] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 237.361633][ T9440] netif_open+0xf2/0x160 [ 237.361659][ T9440] ? __pfx_netif_open+0x10/0x10 [ 237.361688][ T9440] ? team_add_slave+0x7db/0x2180 [ 237.361711][ T9440] dev_open+0xb2/0x260 [ 237.361731][ T9440] team_add_slave+0xaf9/0x2180 [ 237.361758][ T9440] ? __pfx_team_add_slave+0x10/0x10 [ 237.361786][ T9440] ? __pfx___dev_change_flags+0x10/0x10 [ 237.361814][ T9440] ? validate_linkmsg+0x57c/0xb60 [ 237.361830][ T9440] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 237.361852][ T9440] ? __pfx_team_add_slave+0x10/0x10 [ 237.361871][ T9440] do_set_master+0x40f/0x730 [ 237.361898][ T9440] ? netif_change_flags+0x80/0x160 [ 237.361918][ T9440] do_setlink.constprop.0+0xbd8/0x4380 [ 237.361942][ T9440] ? __pfx_console_unlock+0x10/0x10 [ 237.361965][ T9440] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 237.361998][ T9440] ? __lock_acquire+0xb8a/0x1c90 [ 237.362034][ T9440] ? __mutex_trylock_common+0xe9/0x250 [ 237.362060][ T9440] ? __pfx___mutex_trylock_common+0x10/0x10 [ 237.362086][ T9440] ? __pfx___might_resched+0x10/0x10 [ 237.362104][ T9440] ? rcu_is_watching+0x12/0xc0 [ 237.362124][ T9440] ? trace_contention_end+0xdd/0x130 [ 237.362149][ T9440] ? __mutex_lock+0x1c5/0x1060 [ 237.362169][ T9440] ? __nla_validate_parse+0x600/0x2880 [ 237.362189][ T9440] ? rcu_is_watching+0x12/0xc0 [ 237.362211][ T9440] ? __pfx___mutex_lock+0x10/0x10 [ 237.362250][ T9440] rtnl_newlink+0x1446/0x2000 [ 237.362279][ T9440] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.362302][ T9440] ? kmem_cache_free+0x2d4/0x6c0 [ 237.362319][ T9440] ? kfree_skbmem+0x1a4/0x1f0 [ 237.362348][ T9440] ? kfree_skbmem+0x1a4/0x1f0 [ 237.362373][ T9440] ? __lock_acquire+0x622/0x1c90 [ 237.362398][ T9440] ? rcu_is_watching+0x12/0xc0 [ 237.362427][ T9440] ? find_held_lock+0x2b/0x80 [ 237.362444][ T9440] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.362461][ T9440] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.362476][ T9440] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 237.362495][ T9440] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.362515][ T9440] rtnetlink_rcv_msg+0x95e/0xe90 [ 237.362536][ T9440] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.362563][ T9440] ? ref_tracker_free+0x37c/0x830 [ 237.362593][ T9440] netlink_rcv_skb+0x158/0x420 [ 237.362612][ T9440] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.362634][ T9440] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.362662][ T9440] ? netlink_deliver_tap+0x1ae/0xd30 [ 237.362696][ T9440] netlink_unicast+0x5aa/0x870 [ 237.362719][ T9440] ? __pfx_netlink_unicast+0x10/0x10 [ 237.362749][ T9440] netlink_sendmsg+0x8c8/0xdd0 [ 237.362773][ T9440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.362796][ T9440] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 237.362828][ T9440] ____sys_sendmsg+0xa98/0xc70 [ 237.362855][ T9440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.362875][ T9440] ? get_compat_msghdr+0x11a/0x170 [ 237.362917][ T9440] ___sys_sendmsg+0x134/0x1d0 [ 237.362937][ T9440] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.362979][ T9440] ? find_held_lock+0x2b/0x80 [ 237.363022][ T9440] __sys_sendmsg+0x16d/0x220 [ 237.363040][ T9440] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.363070][ T9440] ? rcu_is_watching+0x12/0xc0 [ 237.363094][ T9440] __do_fast_syscall_32+0x7c/0x300 [ 237.363118][ T9440] do_fast_syscall_32+0x32/0x80 [ 237.363141][ T9440] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.363165][ T9440] RIP: 0023:0xf7fa4579 [ 237.363181][ T9440] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 237.363199][ T9440] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 237.363218][ T9440] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 237.363229][ T9440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.363240][ T9440] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.363250][ T9440] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 237.363260][ T9440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.363286][ T9440] [ 237.370381][ T9440] team0: Device ipvlan1 failed to register rx_handler [ 239.448453][ T10] vhci_hcd: vhci_device speed not set [ 239.698802][ T1471] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 239.848474][ T1471] usb 5-1: Using ep0 maxpacket: 32 [ 239.860803][ T1471] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 239.864946][ T1471] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 239.869113][ T1471] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.872534][ T1471] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 239.881276][ T1471] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 239.884415][ T1471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.887062][ T1471] usb 5-1: Product: syz [ 239.889462][ T1471] usb 5-1: Manufacturer: syz [ 239.891152][ T1471] usb 5-1: SerialNumber: syz [ 239.921508][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 239.936578][ T1471] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input15 [ 240.138499][ T1471] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 240.144509][ T1471] (id 0x00) [ 240.218414][ T1471] rc_core: IR keymap rc-imon-pad not found [ 240.223844][ T1471] Registered IR keymap rc-empty [ 240.229482][ T1471] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 240.238831][ T1471] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 240.345942][ T1471] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 240.356201][ T1471] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input16 [ 240.459367][ T1471] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:12> initialized [ 240.579252][ T60] usb 5-1: USB disconnect, device number 12 [ 241.079810][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.082416][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.124014][ T9489] bridge_slave_1: left allmulticast mode [ 241.125930][ T9489] bridge_slave_1: left promiscuous mode [ 241.131207][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.180628][ T9489] bridge_slave_0: left allmulticast mode [ 241.182571][ T9489] bridge_slave_0: left promiscuous mode [ 241.184665][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.349320][ T9497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.835'. [ 241.358392][ T1334] vhci_hcd: vhci_device speed not set [ 241.833183][ T9518] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 243.088821][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 243.088834][ T40] audit: type=1326 audit(1761174342.553:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.3.842" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 243.246198][ T40] audit: type=1326 audit(1761174342.703:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.2.843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 243.253208][ T40] audit: type=1326 audit(1761174342.703:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.2.843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 243.261182][ T40] audit: type=1326 audit(1761174342.713:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.2.843" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 243.261218][ T9533] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 243.268094][ T40] audit: type=1326 audit(1761174342.713:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.2.843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 243.270336][ T9533] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 243.280693][ T40] audit: type=1326 audit(1761174342.713:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.2.843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 243.287645][ T40] audit: type=1326 audit(1761174342.713:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.2.843" exe="/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 243.294600][ T40] audit: type=1326 audit(1761174342.723:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.2.843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 243.301573][ T40] audit: type=1326 audit(1761174342.723:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.2.843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 243.308055][ T40] audit: type=1326 audit(1761174342.723:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.2.843" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 243.934081][ T9533] vhci_hcd vhci_hcd.0: Device attached [ 244.053430][ T9534] vhci_hcd: connection closed [ 244.070319][ T1228] vhci_hcd: stop threads [ 244.076750][ T1228] vhci_hcd: release socket [ 244.079483][ T1228] vhci_hcd: disconnect device [ 244.082904][ T9553] loop2: detected capacity change from 0 to 7 [ 244.085920][ T5939] Dev loop2: unable to read RDB block 7 [ 244.088026][ T5939] loop2: AHDI p1 p2 p3 [ 244.089772][ T5939] loop2: partition table partially beyond EOD, truncated [ 244.092312][ T5939] loop2: p1 start 1601398130 is beyond EOD, truncated [ 244.094533][ T5939] loop2: p2 start 1702059890 is beyond EOD, truncated [ 244.099406][ T9553] Dev loop2: unable to read RDB block 7 [ 244.102340][ T9553] loop2: AHDI p1 p2 p3 [ 244.104271][ T9553] loop2: partition table partially beyond EOD, truncated [ 244.107502][ T9553] loop2: p1 start 1601398130 is beyond EOD, truncated [ 244.110750][ T9553] loop2: p2 start 1702059890 is beyond EOD, truncated [ 244.119030][ T29] vhci_hcd: vhci_device speed not set [ 245.329343][ T9576] openvswitch: netlink: Flow key attr not present in new flow. [ 245.412512][ T9573] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 246.206717][ T9592] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 246.208911][ T9592] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 246.214763][ T9592] vhci_hcd vhci_hcd.0: Device attached [ 246.422693][ T9602] FAULT_INJECTION: forcing a failure. [ 246.422693][ T9602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.426885][ T9602] CPU: 2 UID: 0 PID: 9602 Comm: syz.1.862 Not tainted syzkaller #0 PREEMPT(full) [ 246.426899][ T9602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.426906][ T9602] Call Trace: [ 246.426910][ T9602] [ 246.426915][ T9602] dump_stack_lvl+0x16c/0x1f0 [ 246.426932][ T9602] should_fail_ex+0x512/0x640 [ 246.426951][ T9602] _copy_to_user+0x32/0xd0 [ 246.426970][ T9602] simple_read_from_buffer+0xcb/0x170 [ 246.426990][ T9602] proc_fail_nth_read+0x197/0x240 [ 246.427003][ T9602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.427015][ T9602] ? rw_verify_area+0xcf/0x6c0 [ 246.427025][ T9602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.427037][ T9602] vfs_read+0x1e4/0xcf0 [ 246.427052][ T9602] ? __pfx_vfs_read+0x10/0x10 [ 246.427062][ T9602] ? find_held_lock+0x2b/0x80 [ 246.427077][ T9602] ? __fget_files+0x20e/0x3c0 [ 246.427088][ T9602] ? handle_mm_fault+0x240/0xd10 [ 246.427111][ T9602] ksys_read+0x12a/0x250 [ 246.427122][ T9602] ? __pfx_ksys_read+0x10/0x10 [ 246.427135][ T9602] ? rcu_is_watching+0x12/0xc0 [ 246.427149][ T9602] __do_fast_syscall_32+0x7c/0x300 [ 246.427163][ T9602] do_fast_syscall_32+0x32/0x80 [ 246.427176][ T9602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.427190][ T9602] RIP: 0023:0xf709d579 [ 246.427199][ T9602] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 246.427209][ T9602] RSP: 002b:00000000f548d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 246.427220][ T9602] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f548d620 [ 246.427227][ T9602] RDX: 000000000000000f RSI: 00000000f7435ff4 RDI: 0000000000000000 [ 246.427233][ T9602] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 246.427239][ T9602] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 246.427245][ T9602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.427259][ T9602] [ 246.459205][ T60] usb 43-1: new high-speed USB device number 13 using vhci_hcd [ 246.518508][ T9603] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 246.521297][ T9603] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 246.524474][ T9603] vhci_hcd vhci_hcd.0: Device attached [ 246.778535][ T6560] usb 41-1: new high-speed USB device number 15 using vhci_hcd [ 246.849235][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.863992][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.889703][ T9614] 0·: left allmulticast mode [ 246.972003][ T1228] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.975549][ T1228] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.980746][ T1228] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.987617][ T1228] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.104396][ T9593] vhci_hcd: connection reset by peer [ 247.106721][ T1228] vhci_hcd: stop threads [ 247.108132][ T1228] vhci_hcd: release socket [ 247.110189][ T1228] vhci_hcd: disconnect device [ 247.157033][ T9604] vhci_hcd: connection reset by peer [ 247.159069][ T1142] vhci_hcd: stop threads [ 247.160841][ T1142] vhci_hcd: release socket [ 247.162713][ T1142] vhci_hcd: disconnect device [ 247.195485][ T9620] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 247.444446][ T9621] delete_channel: no stack [ 247.735041][ T9640] fuse: Unknown parameter 'zGGQ:”‚¬™' [ 247.781551][ T9633] orangefs_devreq_write_iter: failed to copy head. [ 247.832868][ T9642] FAULT_INJECTION: forcing a failure. [ 247.832868][ T9642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.846716][ T9642] CPU: 3 UID: 0 PID: 9642 Comm: syz.3.874 Not tainted syzkaller #0 PREEMPT(full) [ 247.846733][ T9642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.846740][ T9642] Call Trace: [ 247.846744][ T9642] [ 247.846748][ T9642] dump_stack_lvl+0x16c/0x1f0 [ 247.846764][ T9642] should_fail_ex+0x512/0x640 [ 247.846785][ T9642] _copy_to_user+0x32/0xd0 [ 247.846804][ T9642] simple_read_from_buffer+0xcb/0x170 [ 247.846824][ T9642] proc_fail_nth_read+0x197/0x240 [ 247.846837][ T9642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.846850][ T9642] ? rw_verify_area+0xcf/0x6c0 [ 247.846860][ T9642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.846872][ T9642] vfs_read+0x1e4/0xcf0 [ 247.846886][ T9642] ? __pfx_vfs_read+0x10/0x10 [ 247.846896][ T9642] ? find_held_lock+0x2b/0x80 [ 247.846912][ T9642] ? __fget_files+0x20e/0x3c0 [ 247.846928][ T9642] ksys_read+0x12a/0x250 [ 247.846939][ T9642] ? __pfx_ksys_read+0x10/0x10 [ 247.846950][ T9642] ? fput+0x9b/0xd0 [ 247.846964][ T9642] ? rcu_is_watching+0x12/0xc0 [ 247.846978][ T9642] __do_fast_syscall_32+0x7c/0x300 [ 247.846993][ T9642] do_fast_syscall_32+0x32/0x80 [ 247.847006][ T9642] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.847020][ T9642] RIP: 0023:0xf7fa4579 [ 247.847029][ T9642] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 247.847040][ T9642] RSP: 002b:00000000f5496590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 247.847050][ T9642] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5496620 [ 247.847057][ T9642] RDX: 000000000000000f RSI: 00000000f7435ff4 RDI: 0000000000000000 [ 247.847063][ T9642] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 247.847069][ T9642] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 247.847076][ T9642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.847090][ T9642] [ 247.916335][ C3] vkms_vblank_simulate: vblank timer overrun [ 248.050500][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 249.184979][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 249.242807][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 249.242824][ T40] audit: type=1326 audit(1761174348.703:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.1.883" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 249.624636][ T9690] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 249.626781][ T9690] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 249.631494][ T9690] vhci_hcd vhci_hcd.0: Device attached [ 249.888550][ T6007] usb 39-1: new high-speed USB device number 14 using vhci_hcd [ 250.294299][ T9691] vhci_hcd: connection reset by peer [ 250.296733][ T46] vhci_hcd: stop threads [ 250.298575][ T46] vhci_hcd: release socket [ 250.300423][ T46] vhci_hcd: disconnect device [ 250.513202][ T9698] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 250.819368][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 250.829758][ T9700] macvlan2: entered allmulticast mode [ 250.833109][ T9700] veth1_vlan: entered allmulticast mode [ 250.837974][ T9700] veth1_vlan: left allmulticast mode [ 250.859140][ T9708] /dev/nullb0: Can't open blockdev [ 250.956398][ T9705] /dev/nullb0: Can't open blockdev [ 250.985560][ T9710] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 251.144799][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 251.678432][ T60] vhci_hcd: vhci_device speed not set [ 251.889851][ T9716] /dev/nullb0: Can't open blockdev [ 251.918494][ T6560] vhci_hcd: vhci_device speed not set [ 253.657039][ T40] audit: type=1326 audit(1761174353.113:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9726 comm="syz.3.894" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 253.785391][ T40] audit: type=1326 audit(1761174353.243:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.0.895" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffd579 code=0x0 [ 253.812570][ T9734] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 253.815005][ T9734] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 253.819112][ T9734] vhci_hcd vhci_hcd.0: Device attached [ 253.931541][ T9740] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 253.934206][ T9740] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 253.939115][ T9740] vhci_hcd vhci_hcd.0: Device attached [ 254.089335][ T29] usb 43-1: new high-speed USB device number 14 using vhci_hcd [ 254.128160][ T9745] siw: device registration error -23 [ 254.208523][ T8598] usb 37-1: new high-speed USB device number 12 using vhci_hcd [ 254.674518][ T9735] vhci_hcd: connection reset by peer [ 254.676889][ T1228] vhci_hcd: stop threads [ 254.678265][ T1228] vhci_hcd: release socket [ 254.679778][ T1228] vhci_hcd: disconnect device [ 254.738567][ T9741] vhci_hcd: connection reset by peer [ 254.742636][ T46] vhci_hcd: stop threads [ 254.744087][ T46] vhci_hcd: release socket [ 254.745868][ T46] vhci_hcd: disconnect device [ 255.038394][ T6007] vhci_hcd: vhci_device speed not set [ 255.367532][ T9780] nvme_fabrics: missing parameter 'transport=%s' [ 255.371545][ T9780] nvme_fabrics: missing parameter 'nqn=%s' [ 255.888423][ T6560] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 256.054320][ T6560] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 256.058731][ T6560] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 256.064139][ T6560] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 256.076184][ T6560] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 256.086212][ T6560] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 256.101210][ T6560] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.105155][ T6560] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.109041][ T6560] usb 7-1: Product: syz [ 256.110816][ T6560] usb 7-1: Manufacturer: syz [ 256.121833][ T6560] cdc_wdm 7-1:1.0: skipping garbage [ 256.124066][ T6560] cdc_wdm 7-1:1.0: skipping garbage [ 256.127494][ T6560] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 256.130499][ T6560] cdc_wdm 7-1:1.0: Unknown control protocol [ 256.268078][ T40] audit: type=1326 audit(1761174355.723:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.0.910" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffd579 code=0x0 [ 256.372429][ T9811] ubi31: attaching mtd0 [ 256.389471][ T9811] ubi31: scanning is finished [ 256.391326][ T9811] ubi31: empty MTD device detected [ 256.563273][ T6023] usb 7-1: USB disconnect, device number 9 [ 256.575607][ T9812] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 256.577935][ T9812] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 256.580780][ T9812] vhci_hcd vhci_hcd.0: Device attached [ 256.809432][ T9811] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 256.812389][ T9811] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 256.815103][ T9811] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 256.818078][ T9811] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 256.829643][ T9811] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 256.831814][ T9811] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 256.834438][ T9811] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 62789030 [ 256.837674][ T9811] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 256.899547][ T9823] ubi31: background thread "ubi_bgt31d" started, PID 9823 [ 257.148020][ T9816] vhci_hcd: connection closed [ 257.148453][ T46] vhci_hcd: stop threads [ 257.152045][ T46] vhci_hcd: release socket [ 257.154019][ T46] vhci_hcd: disconnect device [ 258.100744][ T9848] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 258.408703][ T6005] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 258.507699][ T9870] /dev/nullb0: Can't open blockdev [ 258.584917][ T9871] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 258.587002][ T9871] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 258.590307][ T9871] vhci_hcd vhci_hcd.0: Device attached [ 258.659792][ T6005] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 258.662869][ T6005] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 258.666245][ T6005] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.669736][ T6005] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 258.674250][ T6005] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 258.734151][ T6005] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.737620][ T6005] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.741116][ T6005] usb 8-1: Product: syz [ 258.742947][ T6005] usb 8-1: Manufacturer: syz [ 258.758493][ T6005] cdc_wdm 8-1:1.0: skipping garbage [ 258.760595][ T6005] cdc_wdm 8-1:1.0: skipping garbage [ 258.766520][ T6005] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 258.769922][ T6005] cdc_wdm 8-1:1.0: Unknown control protocol [ 258.848411][ T6023] usb 39-1: new high-speed USB device number 15 using vhci_hcd [ 258.918935][ T9878] /dev/nullb0: Can't open blockdev [ 258.960496][ T24] usb 8-1: USB disconnect, device number 8 [ 259.378370][ T8598] vhci_hcd: vhci_device speed not set [ 259.598809][ T29] vhci_hcd: vhci_device speed not set [ 259.672610][ T40] audit: type=1326 audit(1761174359.133:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.3.928" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x0 [ 259.771054][ T9884] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 259.797540][ T9872] vhci_hcd: connection reset by peer [ 259.799945][ T46] vhci_hcd: stop threads [ 259.801315][ T46] vhci_hcd: release socket [ 259.802768][ T46] vhci_hcd: disconnect device [ 260.332487][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.342607][ T9954] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 261.345353][ T9954] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 261.373956][ T9954] vhci_hcd vhci_hcd.0: Device attached [ 261.607255][ T9968] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 261.611982][ T9968] block device autoloading is deprecated and will be removed. [ 261.679121][ T9969] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 261.922232][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 262.312100][ T9958] vhci_hcd: connection closed [ 262.312714][ T1145] vhci_hcd: stop threads [ 262.316369][ T1145] vhci_hcd: release socket [ 262.323513][ T1145] vhci_hcd: disconnect device [ 262.456039][ T9990] bridge2: entered allmulticast mode [ 262.550989][ T9991] usb 2-1: USB disconnect, device number 2 [ 262.894451][ T9993] Invalid logical block size (768) [ 263.605148][T10035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.963'. [ 263.881183][T10050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.967'. [ 264.026071][T10052] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.031231][T10052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.518399][ T6023] vhci_hcd: vhci_device speed not set [ 264.678077][T10059] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 265.190588][ T40] audit: type=1326 audit(1761174364.653:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.3.973" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 265.332449][T10074] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 265.335002][T10074] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 265.337513][T10074] vhci_hcd vhci_hcd.0: Device attached [ 265.588613][ T29] usb 43-1: new high-speed USB device number 15 using vhci_hcd [ 266.062298][T10088] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 266.071208][T10076] vhci_hcd: connection reset by peer [ 266.079123][ T1145] vhci_hcd: stop threads [ 266.081026][ T1145] vhci_hcd: release socket [ 266.082998][ T1145] vhci_hcd: disconnect device [ 267.628854][T10115] syzkaller0: entered promiscuous mode [ 267.631030][T10115] syzkaller0: entered allmulticast mode [ 267.641791][T10115] nfs4: Bad value for 'source' [ 268.527482][T10137] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 269.181719][T10143] /dev/nullb0: Can't open blockdev [ 270.662227][ T40] audit: type=1326 audit(1761174370.123:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.2.997" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d579 code=0x0 [ 270.756894][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 271.082861][ T29] vhci_hcd: vhci_device speed not set [ 271.252764][T10169] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 271.254870][T10169] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 271.257629][T10169] vhci_hcd vhci_hcd.0: Device attached [ 271.508409][ T60] usb 41-1: new high-speed USB device number 16 using vhci_hcd [ 271.523590][T10172] vhci_hcd: connection reset by peer [ 271.526267][ T93] vhci_hcd: stop threads [ 271.527639][ T93] vhci_hcd: release socket [ 271.531803][ T93] vhci_hcd: disconnect device [ 272.113595][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1000'. [ 272.525620][T10187] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 272.628475][ T29] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 272.661190][T10189] sp0: Synchronizing with TNC [ 272.665440][T10188] [U] è` [ 272.788429][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 272.800450][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.898068][ T29] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 272.903466][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.912472][ T29] usb 8-1: config 0 descriptor?? [ 273.424870][T10198] bridge1: left promiscuous mode [ 273.426764][T10198] bridge2: left promiscuous mode [ 273.428698][T10198] bridge3: left promiscuous mode [ 273.432180][ T1141] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.435293][ T1141] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.438211][ T1141] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.442089][ T1141] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.713341][ T40] audit: type=1326 audit(1761174373.173:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.0.1010" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x0 [ 274.140546][T10216] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 274.853389][T10223] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 274.855695][T10223] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 274.869752][T10223] vhci_hcd vhci_hcd.0: Device attached [ 275.428886][ T29] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 275.488530][ T29] usb 8-1: USB disconnect, device number 9 [ 275.492115][T10226] /dev/sr0: Can't open blockdev [ 275.510421][ T40] audit: type=1804 audit(1761174374.973:425): pid=10229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1013" name="/newroot/258/file0" dev="tmpfs" ino=1408 res=1 errno=0 [ 275.641363][T10224] vhci_hcd: connection closed [ 275.641776][ T1145] vhci_hcd: stop threads [ 275.647760][ T1145] vhci_hcd: release socket [ 275.657781][ T1145] vhci_hcd: disconnect device [ 275.913292][ T40] audit: type=1326 audit(1761174375.373:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.1.1016" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 276.077876][T10248] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 276.080681][T10248] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 276.084848][T10248] vhci_hcd vhci_hcd.0: Device attached [ 276.444490][ T40] audit: type=1326 audit(1761174375.903:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.3.1021" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x0 [ 276.537196][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 276.608408][ T10] usb 39-1: new high-speed USB device number 16 using vhci_hcd [ 276.638416][ T60] vhci_hcd: vhci_device speed not set [ 277.054187][T10267] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 277.265307][T10249] vhci_hcd: connection reset by peer [ 277.268710][ T1145] vhci_hcd: stop threads [ 277.272893][ T1145] vhci_hcd: release socket [ 277.278005][ T1145] vhci_hcd: disconnect device [ 277.910492][ T6329] usb usb42-port1: attempt power cycle [ 277.981396][T10289] netlink: 8504 bytes leftover after parsing attributes in process `syz.2.1032'. [ 278.194671][T10292] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1033'. [ 278.324908][ T40] audit: type=1326 audit(1761174377.783:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.2.1036" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d579 code=0x0 [ 278.416171][ T40] audit: type=1326 audit(1761174377.873:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10301 comm="syz.1.1037" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x0 [ 278.488201][T10307] lo speed is unknown, defaulting to 1000 [ 278.491027][T10307] lo speed is unknown, defaulting to 1000 [ 278.498812][T10307] lo speed is unknown, defaulting to 1000 [ 278.539381][T10307] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 278.583535][T10307] lo speed is unknown, defaulting to 1000 [ 278.588268][T10307] lo speed is unknown, defaulting to 1000 [ 278.593385][T10307] lo speed is unknown, defaulting to 1000 [ 278.598987][T10307] lo speed is unknown, defaulting to 1000 [ 278.672601][ T6329] usb usb42-port1: unable to enumerate USB device [ 278.723946][T10306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 278.726037][T10306] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 278.735097][T10306] vhci_hcd vhci_hcd.0: Device attached [ 279.018408][ T1334] usb 41-1: new high-speed USB device number 17 using vhci_hcd [ 279.147873][T10309] vhci_hcd: connection reset by peer [ 279.150101][ T1142] vhci_hcd: stop threads [ 279.151548][ T1142] vhci_hcd: release socket [ 279.160528][ T1142] vhci_hcd: disconnect device [ 279.202736][T10313] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 279.214461][T10313] kvm: pic: level sensitive irq not supported [ 279.215466][T10313] kvm: pic: non byte read [ 279.222509][T10313] kvm: pic: level sensitive irq not supported [ 279.222940][T10313] kvm: pic: non byte read [ 279.229526][T10313] kvm: pic: level sensitive irq not supported [ 279.229809][T10313] kvm: pic: non byte read [ 279.234936][T10313] kvm: pic: level sensitive irq not supported [ 279.235208][T10313] kvm: pic: non byte read [ 279.239707][T10313] kvm: pic: level sensitive irq not supported [ 279.239987][T10313] kvm: pic: non byte read [ 279.244522][T10313] kvm: pic: level sensitive irq not supported [ 279.244814][T10313] kvm: pic: non byte read [ 279.249536][T10313] kvm: pic: level sensitive irq not supported [ 279.249867][T10313] kvm: pic: non byte read [ 279.254918][T10313] kvm: pic: level sensitive irq not supported [ 279.255195][T10313] kvm: pic: non byte read [ 279.262123][T10313] kvm: pic: level sensitive irq not supported [ 279.262398][T10313] kvm: pic: non byte read [ 279.267080][T10313] kvm: pic: level sensitive irq not supported [ 279.267348][T10313] kvm: pic: non byte read [ 279.490431][T10326] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 280.155832][T10333] netlink: 'syz.1.1042': attribute type 10 has an invalid length. [ 280.168560][T10333] FAULT_INJECTION: forcing a failure. [ 280.168560][T10333] name failslab, interval 1, probability 0, space 0, times 0 [ 280.172979][T10333] CPU: 3 UID: 0 PID: 10333 Comm: syz.1.1042 Not tainted syzkaller #0 PREEMPT(full) [ 280.172995][T10333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.173001][T10333] Call Trace: [ 280.173006][T10333] [ 280.173011][T10333] dump_stack_lvl+0x16c/0x1f0 [ 280.173027][T10333] should_fail_ex+0x512/0x640 [ 280.173045][T10333] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 280.173059][T10333] should_failslab+0xc2/0x120 [ 280.173074][T10333] kmem_cache_alloc_node_noprof+0x78/0x770 [ 280.173085][T10333] ? __alloc_skb+0x2b2/0x380 [ 280.173106][T10333] ? __alloc_skb+0x2b2/0x380 [ 280.173121][T10333] __alloc_skb+0x2b2/0x380 [ 280.173138][T10333] ? __pfx___alloc_skb+0x10/0x10 [ 280.173153][T10333] ? __pfx_rtnl_newlink+0x10/0x10 [ 280.173170][T10333] netlink_ack+0x15d/0xb80 [ 280.173186][T10333] netlink_rcv_skb+0x332/0x420 [ 280.173197][T10333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.173210][T10333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.173226][T10333] ? netlink_deliver_tap+0x1ae/0xd30 [ 280.173247][T10333] netlink_unicast+0x5aa/0x870 [ 280.173260][T10333] ? __pfx_netlink_unicast+0x10/0x10 [ 280.173277][T10333] netlink_sendmsg+0x8c8/0xdd0 [ 280.173290][T10333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.173303][T10333] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 280.173322][T10333] ____sys_sendmsg+0xa98/0xc70 [ 280.173337][T10333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.173350][T10333] ? get_compat_msghdr+0x11a/0x170 [ 280.173375][T10333] ___sys_sendmsg+0x134/0x1d0 [ 280.173386][T10333] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.173411][T10333] ? find_held_lock+0x2b/0x80 [ 280.173432][T10333] __sys_sendmsg+0x16d/0x220 [ 280.173442][T10333] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.173459][T10333] ? rcu_is_watching+0x12/0xc0 [ 280.173473][T10333] __do_fast_syscall_32+0x7c/0x300 [ 280.173487][T10333] do_fast_syscall_32+0x32/0x80 [ 280.173500][T10333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.173514][T10333] RIP: 0023:0xf709d579 [ 280.173524][T10333] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 280.173534][T10333] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 280.173545][T10333] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000600 [ 280.173551][T10333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.173557][T10333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.173563][T10333] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 280.173573][T10333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.173588][T10333] [ 280.273368][ C3] vkms_vblank_simulate: vblank timer overrun [ 280.322376][T10337] netlink: 'syz.2.1043': attribute type 2 has an invalid length. [ 280.911182][ T40] audit: type=1326 audit(1761174380.373:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.0.1047" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x0 [ 281.242124][T10350] Context (ID=0x1) not attached to queue pair (handle=0x1:0x81) [ 281.246843][T10350] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 281.249122][T10350] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 281.251334][T10350] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 281.253500][T10350] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 281.255823][T10350] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 281.258072][T10350] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 281.260305][T10350] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 281.262569][T10350] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 281.264879][T10350] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 281.267073][T10350] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 281.269507][T10350] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 281.271720][T10350] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 281.273941][T10350] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 281.276282][T10350] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 281.279916][T10350] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 281.283085][T10350] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 281.286232][T10350] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 281.288635][T10350] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 281.290950][T10350] comedi comedi3: 8255: I/O port conflict (0x40000004,4) [ 281.293377][T10350] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 281.295479][T10350] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 281.297613][T10350] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 281.300222][T10350] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 281.302637][T10350] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 281.304816][T10350] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 281.307031][T10350] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 281.464036][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 281.485638][T10353] random: crng reseeded on system resumption [ 281.580882][T10353] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1049'. [ 281.590119][T10331] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 281.723790][T10361] /dev/nullb0: Can't open blockdev [ 281.746980][ T40] audit: type=1326 audit(1761174381.203:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.1.1052" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 281.959380][ T10] vhci_hcd: vhci_device speed not set [ 281.961336][T10366] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 281.963479][T10366] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 281.966067][T10366] vhci_hcd vhci_hcd.0: Device attached [ 282.331460][T10372] erspan0: entered promiscuous mode [ 282.333643][T10372] erspan0: entered allmulticast mode [ 282.458700][ T40] audit: type=1326 audit(1761174381.913:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.2.1055" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 282.465579][ T10] usb 39-1: device descriptor read/64, error -110 [ 282.516515][ T40] audit: type=1326 audit(1761174381.923:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.2.1055" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 282.547105][ T40] audit: type=1326 audit(1761174381.933:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.2.1055" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 282.567734][ T40] audit: type=1326 audit(1761174381.943:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.2.1055" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 282.594208][T10378] FAULT_INJECTION: forcing a failure. [ 282.594208][T10378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.599476][T10378] CPU: 2 UID: 0 PID: 10378 Comm: syz.3.1053 Not tainted syzkaller #0 PREEMPT(full) [ 282.599513][T10378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.599523][T10378] Call Trace: [ 282.599529][T10378] [ 282.599536][T10378] dump_stack_lvl+0x16c/0x1f0 [ 282.599561][T10378] should_fail_ex+0x512/0x640 [ 282.599591][T10378] strncpy_from_user+0x3b/0x2e0 [ 282.599618][T10378] getname_flags.part.0+0x8f/0x550 [ 282.599647][T10378] getname_flags+0x93/0xf0 [ 282.599665][T10378] do_sys_openat2+0xb8/0x1d0 [ 282.599689][T10378] ? __pfx_do_sys_openat2+0x10/0x10 [ 282.599714][T10378] ? __pfx___schedule+0x10/0x10 [ 282.599731][T10378] ? __fget_files+0x20e/0x3c0 [ 282.599753][T10378] __ia32_compat_sys_openat+0x16d/0x210 [ 282.599785][T10378] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 282.599809][T10378] ? xfd_validate_state+0x61/0x180 [ 282.599838][T10378] ? rcu_is_watching+0x12/0xc0 [ 282.599861][T10378] __do_fast_syscall_32+0x7c/0x300 [ 282.599884][T10378] do_fast_syscall_32+0x32/0x80 [ 282.599904][T10378] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.599925][T10378] RIP: 0023:0xf7fa4579 [ 282.599939][T10378] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 282.599955][T10378] RSP: 002b:00000000f547555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 282.599972][T10378] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000680 [ 282.599984][T10378] RDX: 0000000000040000 RSI: 0000000000000019 RDI: 0000000000000000 [ 282.599994][T10378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.600004][T10378] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 282.600014][T10378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.600039][T10378] [ 282.601238][ T40] audit: type=1326 audit(1761174381.943:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.2.1055" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 282.698168][T10368] vhci_hcd: connection closed [ 282.700207][ T1142] vhci_hcd: stop threads [ 282.700899][ T40] audit: type=1326 audit(1761174381.963:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.2.1055" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 282.702191][ T1142] vhci_hcd: release socket [ 282.703899][ T40] audit: type=1326 audit(1761174381.963:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.2.1055" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 282.711156][ T10] usb 39-1: new high-speed USB device number 17 using vhci_hcd [ 282.711647][ T1142] vhci_hcd: disconnect device [ 282.712753][ T40] audit: type=1326 audit(1761174381.963:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.2.1055" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000 [ 282.738905][ T40] audit: type=1326 audit(1761174381.963:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.2.1055" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 282.976827][T10389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1056'. [ 284.239073][ T1334] vhci_hcd: vhci_device speed not set [ 284.442061][T10411] netlink: 'syz.1.1066': attribute type 13 has an invalid length. [ 284.733649][ T8403] IPVS: starting estimator thread 0... [ 284.818374][T10423] IPVS: using max 41 ests per chain, 98400 per kthread [ 285.461812][T10436] lo speed is unknown, defaulting to 1000 [ 285.468045][T10436] lo speed is unknown, defaulting to 1000 [ 285.628403][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 285.788405][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 285.791520][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.794648][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.797807][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.801340][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.807342][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 285.810391][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.017743][ T24] usb 8-1: GET_CAPABILITIES returned 0 [ 286.020919][ T24] usbtmc 8-1:16.0: can't read capabilities [ 286.222223][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.225849][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.229236][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.231995][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.234875][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.237681][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.240535][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.244501][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.247273][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.250119][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.253017][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.255775][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.258546][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.261549][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.264374][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.267561][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 286.273502][ T9] usb 8-1: USB disconnect, device number 10 [ 286.816911][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1078'. [ 286.820927][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1078'. [ 287.168375][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 287.318478][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 287.322063][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 287.326152][ T24] usb 8-1: config 4 interface 0 has no altsetting 0 [ 287.331849][ T24] usb 8-1: string descriptor 0 read error: -22 [ 287.333883][ T24] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 287.336758][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.350028][ T24] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 287.358736][ T24] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.363040][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 287.365987][ T24] usb 8-1: media controller created [ 287.379769][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.544606][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 287.562366][ T24] usb 8-1: USB disconnect, device number 11 [ 287.815014][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 287.848625][ T10] vhci_hcd: vhci_device speed not set [ 288.084161][T10484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1088'. [ 288.087190][T10484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1088'. [ 288.090460][T10484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1088'. [ 288.093434][T10484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1088'. [ 288.717625][T10495] netlink: 'syz.3.1092': attribute type 1 has an invalid length. [ 288.733580][T10495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.746083][T10495] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 288.756208][T10495] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 288.978517][T10509] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 289.546091][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1097'. [ 289.994741][T10531] team0: Port device team_slave_0 removed [ 289.999220][T10531] team0: Port device team_slave_1 removed [ 290.001402][T10531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.004609][T10531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.007499][T10531] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 292.256276][T10575] cgroup: fork rejected by pids controller in /syz2 [ 292.507501][T10698] input: syz1 as /devices/virtual/input/input17 [ 292.826750][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 292.868369][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 292.954192][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'. [ 293.028532][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 293.032956][ T24] usb 7-1: config 0 has no interfaces? [ 293.041323][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 293.044305][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.049836][ T24] usb 7-1: Product: syz [ 293.051886][ T24] usb 7-1: Manufacturer: syz [ 293.059554][ T24] usb 7-1: SerialNumber: syz [ 293.078461][ T24] usb 7-1: config 0 descriptor?? [ 293.288879][ T24] usb 7-1: USB disconnect, device number 10 [ 293.405511][T10718] bond1 (unregistering): Released all slaves [ 293.440651][T10721] netlink: 'syz.3.1129': attribute type 13 has an invalid length. [ 293.808582][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 293.935915][T10732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1133'. [ 293.944008][T10732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1133'. [ 293.947832][T10732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1133'. [ 293.952287][T10732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1133'. [ 293.978485][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 293.987957][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 293.992059][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.995397][ T24] usb 5-1: Product: syz [ 293.997736][ T24] usb 5-1: Manufacturer: syz [ 294.001136][ T24] usb 5-1: SerialNumber: syz [ 294.005821][ T24] usb 5-1: config 0 descriptor?? [ 294.012834][ T24] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 294.616765][ T24] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 294.621575][ T24] usb 5-1: USB disconnect, device number 13 [ 294.934953][T10751] hub 9-0:1.0: USB hub found [ 294.943168][T10751] hub 9-0:1.0: 1 port detected [ 295.202155][ T6023] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 295.204665][ T6023] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 295.207086][ T6023] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 295.210146][ T6023] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 295.213509][ T6023] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 295.215974][ T6023] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 295.218694][ T6023] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 295.221163][ T6023] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 295.457096][ T6023] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 295.478079][ T6023] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 295.484894][ T6023] hid-generic 00A0:0006:0003.0009: hidraw0: HID v0.05 Device [syz1] on syz0 [ 295.598432][ T8403] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 295.694247][T10764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1142'. [ 295.698082][T10764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1142'. [ 295.701746][T10764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1142'. [ 295.705296][T10764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1142'. [ 295.770901][ T8403] usb 7-1: config 0 has no interfaces? [ 295.773138][ T8403] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 295.776539][ T8403] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.781599][ T8403] usb 7-1: config 0 descriptor?? [ 296.068496][ T1334] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 296.241002][ T1334] usb 6-1: config 0 has no interfaces? [ 296.242856][ T1334] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.246936][ T1334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.254493][ T1334] usb 6-1: config 0 descriptor?? [ 296.298431][ T6023] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 296.427093][T10777] input: syz1 as /devices/virtual/input/input18 [ 296.436498][T10777] binder: 10774:10777 ioctl c0306201 0 returned -14 [ 296.450645][ T6023] usb 5-1: config 0 has no interfaces? [ 296.452886][ T6023] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 296.455755][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.461121][ T6023] usb 5-1: config 0 descriptor?? [ 296.461405][ T1334] usb 6-1: USB disconnect, device number 5 [ 298.088693][ T1334] usb 7-1: USB disconnect, device number 11 [ 298.896720][ T8403] usb 5-1: USB disconnect, device number 14 [ 299.089351][ T6023] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 299.926997][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1162'. [ 299.938907][T10829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.953700][T10831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1161'. [ 299.958011][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1161'. [ 300.028487][T10829] bond0: Unable to set up delay as MII monitoring is disabled [ 300.147862][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 300.147875][ T40] audit: type=1326 audit(1761174399.593:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.1.1165" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 300.154612][T10844] /dev/nullb0: Can't open blockdev [ 300.298766][T10846] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 300.300898][T10846] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 300.303535][T10846] vhci_hcd vhci_hcd.0: Device attached [ 300.589649][ T6023] usb 39-1: new high-speed USB device number 18 using vhci_hcd [ 300.694934][T10853] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 301.111088][T10853] kvm: pic: level sensitive irq not supported [ 301.140976][T10853] kvm: pic: non byte read [ 301.165453][T10853] kvm: pic: level sensitive irq not supported [ 301.165829][T10853] kvm: pic: non byte read [ 301.183247][T10853] kvm: pic: level sensitive irq not supported [ 301.183529][T10853] kvm: pic: non byte read [ 301.196403][T10853] kvm: pic: level sensitive irq not supported [ 301.201651][T10853] kvm: pic: non byte read [ 301.227205][T10853] kvm: pic: level sensitive irq not supported [ 301.233864][T10853] kvm: pic: non byte read [ 301.276086][ T40] audit: type=1804 audit(1761174400.713:473): pid=10859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1168" name="/newroot/277/file0/file0" dev="9p" ino=72876241 res=1 errno=0 [ 301.286969][T10853] kvm: pic: level sensitive irq not supported [ 301.287998][T10853] kvm: pic: non byte read [ 301.301205][T10853] kvm: pic: level sensitive irq not supported [ 301.302013][T10853] kvm: pic: non byte read [ 301.320812][T10853] kvm: pic: level sensitive irq not supported [ 301.325011][T10853] kvm: pic: non byte read [ 301.333615][T10853] kvm: pic: level sensitive irq not supported [ 301.334278][T10853] kvm: pic: non byte read [ 301.343773][T10853] kvm: pic: level sensitive irq not supported [ 301.344241][T10853] kvm: pic: non byte read [ 301.665787][T10848] vhci_hcd: connection reset by peer [ 301.671483][ T1142] vhci_hcd: stop threads [ 301.673504][ T1142] vhci_hcd: release socket [ 301.675581][ T1142] vhci_hcd: disconnect device [ 302.195612][T10869] /dev/nullb0: Can't open blockdev [ 303.868932][T10900] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 304.513041][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 305.395935][ T40] audit: type=1326 audit(1761174404.853:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10921 comm="syz.3.1188" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 305.460802][T10925] ceph: No mds server is up or the cluster is laggy [ 305.494773][ T29] libceph: connect (1)[c::]:6789 error -101 [ 305.501588][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 305.688433][ T6023] vhci_hcd: vhci_device speed not set [ 305.709025][T10931] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 305.711808][T10931] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 305.717574][T10931] vhci_hcd vhci_hcd.0: Device attached [ 305.948477][ T24] usb 43-1: new high-speed USB device number 16 using vhci_hcd [ 306.111949][T10932] vhci_hcd: connection reset by peer [ 306.114298][ T1145] vhci_hcd: stop threads [ 306.117563][ T1145] vhci_hcd: release socket [ 306.120941][ T1145] vhci_hcd: disconnect device [ 306.741812][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 307.227193][T10965] /dev/nullb0: Can't open blockdev [ 307.808753][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 307.849840][ T40] audit: type=1326 audit(1761174407.313:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10973 comm="syz.2.1202" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d579 code=0x0 [ 307.864000][T10977] /dev/nullb0: Can't open blockdev [ 308.002617][T10979] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 308.005431][T10979] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 308.009007][T10979] vhci_hcd vhci_hcd.0: Device attached [ 308.538528][ T8403] usb 41-1: new high-speed USB device number 18 using vhci_hcd [ 308.883182][T10980] vhci_hcd: connection reset by peer [ 308.898529][ T1145] vhci_hcd: stop threads [ 308.899918][ T1145] vhci_hcd: release socket [ 308.903518][ T1145] vhci_hcd: disconnect device [ 309.268482][ T40] audit: type=1326 audit(1761174408.713:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.3.1204" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 309.605403][T10990] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 309.608221][T10990] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 309.613059][T10990] vhci_hcd vhci_hcd.0: Device attached [ 309.760175][T10991] vhci_hcd: connection closed [ 309.760611][ T1145] vhci_hcd: stop threads [ 309.764557][ T1145] vhci_hcd: release socket [ 309.766521][ T1145] vhci_hcd: disconnect device [ 310.409975][ T40] audit: type=1326 audit(1761174409.873:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.3.1207" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 310.450830][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 310.960683][T11009] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 310.963543][T11009] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 310.969047][T11009] vhci_hcd vhci_hcd.0: Device attached [ 311.343542][T11011] vhci_hcd: connection reset by peer [ 311.346508][ T1141] vhci_hcd: stop threads [ 311.348780][ T1141] vhci_hcd: release socket [ 311.351473][ T1141] vhci_hcd: disconnect device [ 311.421661][ T24] vhci_hcd: vhci_device speed not set [ 311.934451][ T40] audit: type=1326 audit(1761174411.393:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.1.1215" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 312.058541][T11038] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 312.060657][T11038] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 312.063180][T11038] vhci_hcd vhci_hcd.0: Device attached [ 312.270728][T11046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'. [ 312.298390][ T8598] usb 39-1: new high-speed USB device number 19 using vhci_hcd [ 312.735306][T11050] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 312.740086][T11039] vhci_hcd: connection reset by peer [ 312.846293][ T1142] vhci_hcd: stop threads [ 312.848677][ T1142] vhci_hcd: release socket [ 312.851022][ T1142] vhci_hcd: disconnect device [ 313.174051][ T40] audit: type=1326 audit(1761174412.633:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11060 comm="syz.2.1222" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d579 code=0x0 [ 313.512166][T11067] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 313.514238][T11067] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 313.516728][T11067] vhci_hcd vhci_hcd.0: Device attached [ 313.565177][ T29] hid_parser_main: 5 callbacks suppressed [ 313.565197][ T29] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 313.570881][ T29] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 313.574002][ T29] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 313.577093][ T29] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 313.598436][ T29] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 313.601583][ T29] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 313.604680][ T29] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 313.607750][ T29] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 313.618615][ T29] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 313.621942][ T29] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 313.627831][ T29] hid-generic 00A0:0006:0003.000B: hidraw0: HID v0.05 Device [syz1] on syz0 [ 313.878437][ T6024] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 313.972485][T11080] vhci_hcd: connection reset by peer [ 313.975112][ T93] vhci_hcd: stop threads [ 313.977401][ T93] vhci_hcd: release socket [ 313.981730][ T93] vhci_hcd: disconnect device [ 314.115576][ T6024] usb 5-1: config 0 has no interfaces? [ 314.117945][ T6024] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 314.121872][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.127676][ T6024] usb 5-1: config 0 descriptor?? [ 314.217178][ T8403] vhci_hcd: vhci_device speed not set [ 314.339904][T11089] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 315.265525][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1231'. [ 315.416636][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1233'. [ 315.419658][T11205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1233'. [ 315.429392][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1233'. [ 315.433224][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1233'. [ 315.460955][T11207] /dev/nullb0: Can't open blockdev [ 315.557075][ T40] audit: type=1326 audit(1761174415.013:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.3.1235" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 315.869992][T11218] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 315.872053][T11218] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 315.875199][T11218] vhci_hcd vhci_hcd.0: Device attached [ 316.124007][ T40] audit: type=1326 audit(1761174415.583:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.1.1240" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x0 [ 316.128452][ T6024] usb 43-1: new high-speed USB device number 17 using vhci_hcd [ 316.324529][ T6329] usb 5-1: USB disconnect, device number 15 [ 316.348801][T11223] vhci_hcd: connection reset by peer [ 316.352496][ T46] vhci_hcd: stop threads [ 316.354278][ T46] vhci_hcd: release socket [ 316.356519][ T46] vhci_hcd: disconnect device [ 316.543245][T11339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1243'. [ 316.547091][T11339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1243'. [ 316.550936][T11339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1243'. [ 316.554501][T11339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1243'. [ 316.985885][ T40] audit: type=1326 audit(1761174416.443:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.3.1246" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 317.271100][T11355] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 317.273681][T11355] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 317.276682][T11355] vhci_hcd vhci_hcd.0: Device attached [ 317.448606][ T8598] vhci_hcd: vhci_device speed not set [ 317.655154][T11362] __nla_validate_parse: 1 callbacks suppressed [ 317.655188][T11362] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1249'. [ 317.861177][T11358] vhci_hcd: connection closed [ 317.956050][ T46] vhci_hcd: stop threads [ 317.960147][ T46] vhci_hcd: release socket [ 317.962948][ T46] vhci_hcd: disconnect device [ 319.013965][ T40] audit: type=1326 audit(1761174418.473:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1253" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d579 code=0x0 [ 320.658465][ T40] audit: type=1326 audit(1761174420.113:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.1.1260" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x0 [ 321.148432][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'. [ 321.219375][T11524] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 321.289687][ T6024] vhci_hcd: vhci_device speed not set [ 321.650609][ T40] audit: type=1326 audit(1761174421.113:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.1.1271" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 321.802202][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.379762][T11545] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 322.381932][T11545] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 322.384537][T11545] vhci_hcd vhci_hcd.0: Device attached [ 322.465927][T11547] vhci_hcd: connection closed [ 322.466104][ T12] vhci_hcd: stop threads [ 322.469158][ T12] vhci_hcd: release socket [ 322.470570][ T12] vhci_hcd: disconnect device [ 323.396403][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 323.422369][ T8403] hid_parser_main: 4 callbacks suppressed [ 323.422380][ T8403] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 323.429702][ T8403] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.584466][ T40] audit: type=1326 audit(1761174423.043:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.0.1279" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x0 [ 323.699085][T11663] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.542293][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 325.680475][ T40] audit: type=1326 audit(1761174425.143:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11895 comm="syz.1.1292" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x0 [ 325.710526][T11893] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 326.092728][ T40] audit: type=1326 audit(1761174425.553:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.3.1297" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 326.206339][T11915] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 326.208442][T11915] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 326.212512][T11915] vhci_hcd vhci_hcd.0: Device attached [ 326.458369][ T24] usb 43-1: new high-speed USB device number 18 using vhci_hcd [ 326.666017][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 326.703412][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 327.241141][T12044] devpts: Bad value for 'max' [ 327.539795][T12054] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 327.541915][T12054] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 327.544763][T12054] vhci_hcd vhci_hcd.0: Device attached [ 327.598806][T12060] /dev/nullb0: Can't open blockdev [ 327.830294][T11916] vhci_hcd: connection reset by peer [ 327.833596][ T1145] vhci_hcd: stop threads [ 327.834947][ T1145] vhci_hcd: release socket [ 327.836661][ T1145] vhci_hcd: disconnect device [ 327.943810][ T40] audit: type=1326 audit(1761174427.403:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.3.1309" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x0 [ 327.978514][ T6024] usb 40-1: SetAddress Request (22) to port 0 [ 327.981301][ T6024] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 328.082880][T12055] vhci_hcd: connection reset by peer [ 328.085367][ T46] vhci_hcd: stop threads [ 328.087157][ T46] vhci_hcd: release socket [ 328.089743][ T46] vhci_hcd: disconnect device [ 328.290769][T12173] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 328.410261][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 328.414634][ T10] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 328.921182][T12290] cgroup: fork rejected by pids controller in /syz1 [ 328.964629][T12298] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 329.485391][ T10] kernel read not supported for file /video7 (pid: 10 comm: kworker/0:1) [ 329.485438][ T6329] kernel read not supported for file /video7 (pid: 6329 comm: kworker/1:4) [ 329.654127][ T8598] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 329.657534][ T8598] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 329.661105][T12514] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 329.873381][T12532] /dev/nullb0: Can't open blockdev [ 330.313161][T12645] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 330.323093][T12645] kvm: pic: level sensitive irq not supported [ 330.323470][T12645] kvm: pic: non byte read [ 330.328096][T12645] kvm: pic: level sensitive irq not supported [ 330.332973][T12645] kvm: pic: non byte read [ 330.337290][T12645] kvm: pic: level sensitive irq not supported [ 330.337574][T12645] kvm: pic: non byte read [ 330.350050][T12645] kvm: pic: level sensitive irq not supported [ 330.350317][T12645] kvm: pic: non byte read [ 330.355859][T12645] kvm: pic: level sensitive irq not supported [ 330.356127][T12645] kvm: pic: non byte read [ 330.362510][T12645] kvm: pic: level sensitive irq not supported [ 330.362854][T12645] kvm: pic: non byte read [ 330.579159][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 330.872692][T12757] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 331.424420][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 331.678634][ T24] vhci_hcd: vhci_device speed not set [ 332.006124][T12867] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 332.225512][T12871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1336'. [ 332.228358][T12871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1336'. [ 332.231300][T12871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1336'. [ 332.234083][T12871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1336'. [ 332.718823][ T40] audit: type=1326 audit(1761174432.183:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.3.1340" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 333.005447][T12988] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 333.008008][T12988] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 333.012161][ T40] audit: type=1326 audit(1761174432.473:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.2.1341" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d579 code=0x0 [ 333.020031][T12988] vhci_hcd vhci_hcd.0: Device attached [ 333.048692][ T6024] usb 40-1: device descriptor read/8, error -110 [ 333.298412][ T8403] usb 43-1: new high-speed USB device number 19 using vhci_hcd [ 333.440052][ T6024] usb usb40-port1: attempt power cycle [ 334.259933][T13209] /dev/nullb0: Can't open blockdev [ 334.316721][T12992] vhci_hcd: connection reset by peer [ 334.319451][ T46] vhci_hcd: stop threads [ 334.320804][ T46] vhci_hcd: release socket [ 334.322529][ T46] vhci_hcd: disconnect device [ 334.354831][ T6024] usb usb40-port1: unable to enumerate USB device [ 334.393708][T13313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.521838][T13320] fuse: Unknown parameter 'group_iD' [ 335.361371][ T40] audit: type=1326 audit(1761174434.823:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.0.1352" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x0 [ 336.021141][T13340] cdrom: dropping to single frame dma [ 336.202907][T13345] binder: 13344:13345 ioctl c01cf509 80000080 returned -22 [ 336.206189][T13345] binder: 13344:13345 ioctl 4018620d 0 returned -22 [ 336.210813][T13345] binder: 13344:13345 ioctl c0306201 800000c0 returned -11 [ 336.293950][T13351] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1358'. [ 336.296830][T13351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1358'. [ 336.301046][T13351] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1358'. [ 336.304785][T13351] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1358'. [ 336.466674][T13353] kvm: user requested TSC rate below hardware speed [ 337.018450][ T40] audit: type=1326 audit(1761174437.481:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13576 comm="syz.2.1368" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d579 code=0x0 [ 337.100016][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 337.402389][ T40] audit: type=1326 audit(1761174437.871:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13686 comm="syz.3.1371" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 337.658479][T13690] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 337.660592][T13690] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 337.676702][T13690] vhci_hcd vhci_hcd.0: Device attached [ 338.617286][T13693] vhci_hcd: connection reset by peer [ 338.622856][ T46] vhci_hcd: stop threads [ 338.624503][ T46] vhci_hcd: release socket [ 338.627488][ T46] vhci_hcd: disconnect device [ 338.746982][ T8403] vhci_hcd: vhci_device speed not set [ 338.967589][T13913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1378'. [ 338.970693][T13913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1378'. [ 338.973627][T13913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1378'. [ 338.984265][T13913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1378'. [ 340.184956][T14243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1391'. [ 340.264991][ T40] audit: type=1326 audit(1761174440.731:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.1.1394" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 340.404388][T14259] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 340.406484][T14259] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.409303][T14259] vhci_hcd vhci_hcd.0: Device attached [ 340.668762][ T24] usb 39-1: new high-speed USB device number 20 using vhci_hcd [ 341.120109][T14260] vhci_hcd: connection reset by peer [ 341.123988][ T12] vhci_hcd: stop threads [ 341.125583][ T12] vhci_hcd: release socket [ 341.132614][ T12] vhci_hcd: disconnect device [ 341.769115][T14400] __nla_validate_parse: 4 callbacks suppressed [ 341.769132][T14400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1403'. [ 341.784210][T14400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1403'. [ 341.791697][T14400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1403'. [ 341.795378][T14400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1403'. [ 342.457873][ T40] audit: type=1326 audit(1761174442.921:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14698 comm="syz.1.1410" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 342.486827][T14800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1412'. [ 342.489875][T14800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1412'. [ 342.492945][T14800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1412'. [ 342.495781][T14800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1412'. [ 342.672575][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 342.820681][T14808] cgroup: fork rejected by pids controller in /syz3 [ 343.139198][T15230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1422'. [ 343.495854][T15443] /dev/nullb0: Can't open blockdev [ 343.778451][ T8403] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 343.928481][ T8403] usb 5-1: Using ep0 maxpacket: 8 [ 343.933665][ T8403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.937200][ T8403] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 343.940096][ T8403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.947516][ T8403] usb 5-1: config 0 descriptor?? [ 344.035576][T15650] binder: 15649:15650 ioctl c0306201 80000680 returned -14 [ 344.154558][ T8403] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 344.199736][ T40] audit: type=1326 audit(1761174444.671:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.1.1434" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x0 [ 344.233950][T15860] loop2: detected capacity change from 0 to 7 [ 344.237141][T15860] Dev loop2: unable to read RDB block 7 [ 344.239130][T15860] loop2: unable to read partition table [ 344.241000][T15860] loop2: partition table beyond EOD, truncated [ 344.243641][T15860] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 344.302630][ T5352] Dev loop2: unable to read RDB block 7 [ 344.304446][ T5352] loop2: unable to read partition table [ 344.306261][ T5352] loop2: partition table beyond EOD, truncated [ 344.608771][ T34] usb 5-1: USB disconnect, device number 16 [ 344.972191][T16273] binder: 16272:16273 ioctl c0306201 80000300 returned -14 [ 345.282790][T16388] /dev/nullb0: Can't open blockdev [ 345.514186][T16519] /dev/nullb0: Can't open blockdev [ 345.691172][ T8403] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 345.695193][ T8403] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 345.799202][ T24] vhci_hcd: vhci_device speed not set [ 345.834204][ T40] audit: type=1326 audit(1761174446.301:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16702 comm="syz.3.1452" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 346.018213][T16720] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 346.020120][T16720] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 346.022657][T16720] vhci_hcd vhci_hcd.0: Device attached [ 346.222425][T16739] vhci_hcd: connection closed [ 346.224438][ T1141] vhci_hcd: stop threads [ 346.233457][ T1141] vhci_hcd: release socket [ 346.236974][ T1141] vhci_hcd: disconnect device [ 346.265693][T17030] /dev/nullb0: Can't open blockdev [ 346.268556][ T29] vhci_hcd: vhci_device speed not set [ 1092.067151][ T3649] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1092.070184][ T3649] CPU: 2 UID: 0 PID: 3649 Comm: syz.1.6954 Not tainted syzkaller #0 PREEMPT(full) [ 1092.074927][ T3649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1092.078305][ T3649] Call Trace: [ 1092.079419][ T3649] [ 1092.080410][ T3649] dump_stack_lvl+0x3d/0x1f0 [ 1092.081917][ T3649] vpanic+0x640/0x6f0 [ 1092.083188][ T3649] ? path_noexec+0x1ca/0x230 [ 1092.084741][ T3649] panic+0xca/0xd0 [ 1092.086019][ T3649] ? __pfx_panic+0x10/0x10 [ 1092.087443][ T3649] check_panic_on_warn+0xab/0xb0 [ 1092.089021][ T3649] __warn+0xf6/0x3c0 [ 1092.090265][ T3649] ? path_noexec+0x1ca/0x230 [ 1092.091798][ T3649] report_bug+0x3c3/0x580 [ 1092.093185][ T3649] ? path_noexec+0x1ca/0x230 [ 1092.094662][ T3649] handle_bug+0x184/0x210 [ 1092.096047][ T3649] exc_invalid_op+0x17/0x50 [ 1092.097538][ T3649] asm_exc_invalid_op+0x1a/0x20 [ 1092.099068][ T3649] RIP: 0010:path_noexec+0x1ca/0x230 [ 1092.100693][ T3649] Code: ff 83 e3 02 48 89 de e8 04 3c 84 ff 48 85 db 41 0f 95 c4 e8 88 40 84 ff 44 89 e0 5b 5d 41 5c c3 cc cc cc cc e8 77 40 84 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 09 d7 eb ff e9 a8 fe ff ff e8 ff d6 eb [ 1092.107100][ T3649] RSP: 0018:ffffc9000d91fc88 EFLAGS: 00010287 [ 1092.109067][ T3649] RAX: 00000000000000b2 RBX: ffff88804171a1e0 RCX: ffffc9002c14a000 [ 1092.111526][ T3649] RDX: 0000000000080000 RSI: ffffffff82382989 RDI: 0000000000000007 [ 1092.114419][ T3649] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1092.117060][ T3649] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000080ffe000 [ 1092.119594][ T3649] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 1092.122091][ T3649] ? path_noexec+0x1c9/0x230 [ 1092.123610][ T3649] ? path_noexec+0x1c9/0x230 [ 1092.125113][ T3649] do_mmap+0xd23/0x1210 [ 1092.126437][ T3649] ? __pfx_do_mmap+0x10/0x10 [ 1092.127893][ T3649] ? __pfx_down_write_killable+0x10/0x10 [ 1092.129801][ T3649] vm_mmap_pgoff+0x29e/0x470 [ 1092.131269][ T3649] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1092.132890][ T3649] ? __fget_files+0x20e/0x3c0 [ 1092.134486][ T3649] ksys_mmap_pgoff+0x32c/0x5c0 [ 1092.136018][ T3649] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1092.137715][ T3649] __do_fast_syscall_32+0x7c/0x300 [ 1092.139346][ T3649] do_fast_syscall_32+0x32/0x80 [ 1092.140909][ T3649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1092.142924][ T3649] RIP: 0023:0xf707d579 [ 1092.144223][ T3649] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1092.150248][ T3649] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1092.152859][ T3649] RAX: ffffffffffffffda RBX: 0000000080ffe000 RCX: 0000000000002000 [ 1092.155330][ T3649] RDX: 0000000003000007 RSI: 0000000000000011 RDI: 0000000000000005 [ 1092.157889][ T3649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1092.160345][ T3649] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1092.162924][ T3649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1092.165471][ T3649] [ 1092.167096][ T3649] Kernel Offset: disabled [ 1092.168590][ T3649] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:19:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc9000db5eb40 RCX=ffffffff9122d801 RDX=ffffc9000db5eb48 RSI=0000000000000001 RDI=ffffc9000db5e5e0 RBP=0000000000000001 RSP=ffffc9000db5e558 R8 =ffffffff9122d82a R9 =0000000000000000 R10=0000000000000000 R11=00000000000111e4 R12=ffffc9000db5e620 R13=ffffc9000db5e5d0 R14=ffffc9000db5eb40 R15=ffffc9000db5e604 RIP=ffffffff8b5d0766 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097812000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6b5b560820 CR3=000000006ecdd000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000002e8265f RBX=0000000000000001 RCX=ffffffff8b5d12a9 RDX=ffffed1005666656 RSI=ffffffff8da26dd3 RDI=ffffffff8bf071c0 RBP=ffffed1003b5f490 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801dafa480 R14=ffffffff90822ad0 R15=0000000000000000 RIP=ffffffff8b5cfd5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097912000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f739a114 CR3=000000004b445000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85266125 RDI=ffffffff9adc0d60 RBP=ffffffff9adc0d20 RSP=ffffc9000d91f4c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adc0d20 R15=ffffffff852660c0 RIP=ffffffff8526614f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097a12000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f720a3e0 CR3=0000000073446000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000169d61b RBX=0000000000000003 RCX=ffffffff8b5d12a9 RDX=ffffed10056a6656 RSI=ffffffff8da26dd3 RDI=ffffffff8bf071c0 RBP=ffffed10037e7000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801bf38000 R14=ffffffff90822ad0 R15=0000000000000000 RIP=ffffffff8b5cfd5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b12000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000580964c0 CR3=000000007859a000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000